This article promotes the idea of companies pushing malicious updates to specific users. Malicious in the sense of circumventing E2E encryption without notifyin

This article promotes the idea of companies pushing malicious updates to specific users. Malicious in the sense of circumventing E2E encryption without notifying the user and even doing this retroactively? Suppose then, that we get deterministic compilation and an open-source client for E2E encryption. It would then be possible (or rather, much easier) to detect such malicious updates. Should such protection be made illegal? I agree that there is no principled objection to access to communications provided there is a warrant. However, if this requires weakening security far beyond such points, it is no longer obvious that the trade of is worth it.