> Signal without the phone number requirement becomes THE way to move data from anything to anything - malware would be written which setup a Signal account and used that for command and control.

Element doesn't require a phone number and I have no malware issues... also email doesn't.