> no one has extracted the Signal key this way

This is incorrect. Any process running as your user can trivially get the key.