Signal continues to be my favorite, secure messaging app. I request it of as many of my contacts that will tolerate me. 🙂
To answer the initial question, can this feature get abused for OSINT? I’m doubtful it can. This is certainly state of the art privacy by design: showing a profile name and picture while preserving the E2E confidentiality (server-side data being stored encrypted) and disabling OSINT availability.