If you really want security, do it yourself. If you're not generating the keys, storing them locally, and performing the encryption/decryption yourself, you're trusting somebody else to do that for you. What makes you trust those people to do that. I personally use Signal every day, but I only trust it to keep my cellular provider from being able to read my texts. For anything more than that you need GPG.