It is E2E in transit but not everything is encrypted at rest by default. Users now have the option for at rest encryption but you need to make sure that you store your encryption keys properly as there is no net to catch you.