

Since we are talking about payment systems that interact with other banking systems, they will not be actually air gapped. By the nature and purpose of the systems in question, they must have access to the physical Internet (even if it is entirely abstracted away under layers of VPNs and encryption).
Assuming them compromised is prudent. Physical access is total access.
This is very much not that!
A government hosted service would have to be in compliance with record keeping requirements. Conversations like this chat group are subject to the presidential records act and would need to be kept in case of future FOIA requests.
Signal does not do that. In fact, Signal can’t do that (because they can’t see the messages). So using Signal instead of proper government communications channels is a deliberate way to not leave a paper trail. Almost like they think they have something to hide.