Related question… How can an app developer guarantee end to end encryption when the main entry point is almost always a virtual keyboard? Seems like the weakest part of the chain.
The end of end-to-end is the two messaging devices. That is all and in almost every case, it’s enough.
Same answer. They don’t control the input, they just keep it safe once it’s in transit.
It makes sense to attack and work on problems that are actually happening and are solvable within some level of aspiration.
I’m not sure how things work on either mobile OS. Perhaps there can be more clear language and notifications on if everything is being passed to the virtual keyboard developer or not.
Unless you mean Apple, Google, and other Android manufacturers themselves. That’s beyond the scope of any E2E stuff.