The weakness was carefully going through the menus and manually adding a reporter to your group chat. There's not much the Signal team could have done about that.

AKA deliberate or a compromised device