This is an incorrect take. It's true that Signal's server code had not been updated for many months, but that doesn't have an effect on security as messages are end-to-end encrypted locally on the clients/apps. The client/app code had been consistently updated during this period.

Signal responded to the server code being outdated as well: https://github.com/signalapp/Signal-Android/issues/11101#iss...