They decided it already couple years ago. However refresh cycles are such, that only now it starts to arrive to times where changes physically manifest. Another thing which they already said back then and kinda apologised for alas sorry, changes have to wait until next refresh or next generation of the vehicle depending on timing.

Like I guess this is official official now, but design team lead or someone like that said ages ago they would be going back to more physical buttons.

Because they can’t without backdooring the software? Just like they also refuse to co-operate with Swedish government and threatened to leave the market should Sweden try to force them.

You know Russian spies can also use TOR onion routing and so on.

As for phishing there is nothing Signal can do about someone scanning a signal contact sharing QR and adding it to their contracts list beyond informative “hey are you really sure, really really sure you want to add this contact”. If user trusts someone they shouldn’t, no amount of app policy protections help. Or maybe they manage to shish them to scan and approve “share account to another device”. Again nothing Signal can do about that.