This seems to be the default for me, at least on Android.

Android also supports custom encrypted payloads so Signal doesn't have to give them to Google.