Valid Signal privacy issues shrugged off while patches quietly rolled out