> I would also prefer zero trust as a first choice, but for now would be happy to settle for trusting companies that just seem decent.
It's an incentives problem. If the company can always make a bit more money by harvesting data, then why would it not? Especially if it could avoid getting detected or at least avoid getting in trouble.
That's the benefit of E2E - I don't have to trust the middleman. I still have to trust the other end (and that has a whole can of issues to be sorted) and I have to trust myself (and again, that has plenty of problems) but it at least removes an entire vector.