TLS is pretty good, but has a completely different scope. It is entirely dependent on the intentions and competence of people who can control the server and acc

TLS is pretty good, but has a completely different scope. It is entirely dependent on the intentions and competence of people who can control the server and access the certificate, as well as the issuer. The client has very little power over this. A good end-to-end encryption should guarantee that as long as both clients have good intentions, nothing can reveal their communication. This is a much higher level of expectation.