Even after they got busted, I had their sells reps pitching my organization that they have proper E2E encryption, and that the public claims were mistaken.

So, no. This perfectly above-board version is not what happened.