This I see at positive. People should be publicly going after companies with vulnerabilities. If you are creating products, expect people to come back dissecting the flaws. You see change quick then!

I think Signal should have more bug bounties/white hackers though. Companies never want to erode their reputation.