You can’t know with certainty on Signal that the client and the server are actually keeping your messages encrypted at rest, you have to trust them.

This is untrue. By design, messages are never decrypted on the server when end-to-end encryption is in use. They would have to break the encryption first, because they don’t have the keys.