If it were open source, how would you be able to tell that this is the actual code running?
If the proper application of E2EE can be validated using the open source client apps, why is the server code relevant from a security standpoint?
If the proper application of E2EE can be validated using the open source client apps, why is the server code relevant from a security standpoint?
Host your own server, build your own client, and yet be able to talk with everyone else.