If you have your server encrypted at rest, don't you have to manually enter a password or use a hardware key each restart? And then it's not encrypted when running.

> If you self host, why does it matter if it is E2E? What's your threat model?

I prefer E2EE services because clients like GrapheneOS, iPhones, and Macs are a lot harder to hack than a server. And I use Cloudflare tunnels for convenience.

It's also just got really good apps and UX. On par with iCloud photos for the most part, which uses the same model when you have advanced data protection turned on.

Family members, once understanding, would be put at ease by the E2EE. And many people don't self host, so when using it from Ente it's essential. And they just release the stack they themselves run.