That's sort of too bad, because it looks like Signal was one of the only implementations they audited that had no issues.

I hope these authors will eventually look at the new thing too.