Signal's security model does not include metadata, and this is a valid design.