Till this day, I have never been compromised using Molly and it is good they skip the "cosmetic" updates from Signal and stick with security updates, otherwise the team might get overrun with Signal updates that are not essential to the thought behind Molly, namely security enhancement, it being fully FLOSS, along with some other things, which is mostly the reason why people, including myself installed it rather that using Signal.
Again, if there has been a breach of any sort, I'm sure the devs are wiling to hear and patch it, but as far as I can tell, nobody has been and will be compromised.
If people still don't like the project for whatever reason, there are alternatives, but I urge people to stay because it is a really secure project and it is the better hardened alternative to Signal.
Furthermore, if people want more manhours or developers work on the project I'm sure donations are always welcome, man hours don't come cheap, coding is difficult therefore not everyone has that capabillity, I am certain the developers of Molly could make so much more money elsewhere, like the salaries in business revolving coding and security within major tech companies, yet they chose our safety before profit.
With that said, every developer only has so much time to work on it and they are not robots themselves so it is good they stick to the root core of Molly and the reason for its existance. It is best to give the development team the time they require to work on the most essential things, they have not abandoned the project and they are always on top of things as they have stated so, I am certain Molly is in very capable hands.