This looks even less chill than the previous message, which didn't (iirc) accuse "someone from the Signal project?" of making "security theater requests".

Your comment would be much better without any allusions to this person's affiliation. Just answer the question directly without casting aspersions. You seem confident in your answer, so that shouldn't be hard.