[dhblumenfeld1]

wouldn't signal fall under this category (same entity control the client and server in between) but they have no way of peaking inside any envelopes?

[hsbauauvhabzb]

Every e2e solution relies on trusting the application/tooling/crypto used. Open source is better than nothing, but is not a silver bullet for trust.