Signal admins too can ship you an app version that would show injected messages like coming from legitimate sender. [1]
However, while you can be your own xmpp server admin, you can't be Signal admin.
[1]: And for god's sake pls don't even start on reproducible builds, nobody really verifies every app updates.