Don’t let the perfect be the enemy of the good. Signal is easy to use, and that is what really protects millions of people. Otherwise, they would never use a complex or decentralized alternative.

The only data they store are account creation time and last connection time.

https://signal.org/bigbrother/district-of-columbia/

Can someone explain how they do this verification?

“Protect Children” !