Why use Threema if you can use Signal?

I may be missing something, but if code wants to access the HSM must it not be signed, and therefore be explicitly be accepted by the user? Not only is this local, but it also means it’s not totally stealth unless it embeds in a trusted app