This is exactly what came to my mind when I thought about this. If his phone were compromised they would just see everything he types without needing to access Signal — and Tucker would just assume "they got into my account."