If you didn't realize the importance of privacy after the patriot act and seeing the continuation of right wing authoritarianism, it's definitely time to get on board asap. Get yourself and your community on signal instead of texts and tuta or proton instead of regular email, use a vpn (mullvad or proton are solid), and depending on what kinds of actions you may or may not be interested in, learn how to use tails os and tor (try to find a copy of the darknetmarket bible for a good intro)
Edit: simplex is a good alternative to signal too, and if you have a google pixel, grapheneos is solid. Next time you're getting a new phone, get a used pixel and install it. On your computer, there's a lot of telemetry and sketchy stuff windows does, either research and disable that or switch to linux if you can
Please don't use Signal, the US government has all the keys. Self host XMPP, Matrix and SimpleX servers and make sure encryption is properly configured. If you're not generating your encryption keys, why should you use them?
Source? And fyi, if you use Signal you are generating your own encryption keys. Your private keys are generated on your phone and stay on it. So what gives you the idea that
I don't think Signal is unsafe, but agree that it is a weird middle ground. Depends on threat model, of course, but overall I would prefer something selfhostable - for the sake of independence, easier anonymity and censorship resistance. Plus, Signal by default doesn't allow desktop registration (and desktops are much easier to make private than phones), so you'd need either a VM or a command-line application for it, which is a big pet peeve of mine.