Our IT department has found a way. Want to get some credentials sent to you (usually just for new accounts)? They send it only via Signal as a out of band method.

This turned Signal into the defacto default in our org.