If you went the e2e route in the current ecosystem you'd have some kind of Signal-style lock-in where you'd need people running the same client on both ends, but you'd be bouncing around encrypted messages via activitypub, I guess? idk. just spitballin here people