If a device is compromised, the adversary can do whatever they want: screenshots, keyloggers, fork Signal and install their own client.