The whole point of it being E2E encrypted is that you don't need to audit the server. As long as it's implemented correctly on the client, both users verified t

The whole point of it being E2E encrypted is that you don't need to audit the server. As long as it's implemented correctly on the client, both users verified the shared key out-of-band, and both users have enabled the option to warn when the shared key changes, the most the server can do is traffic analysis or denial of service.