Oh, it's worse. End-to-end encryption assurances are essentially in conflict with centralized control over software development and distribution. Literally the same organization end-to-end encryption is supposed to protect from is the one responsible for implementing and deploying that protection and doing that well and correctly.