If you have to trust your first network hop, then the "ends" of your "end to end" encryption are not the actual ends. The trust boundary needs to be pushed all

If you have to trust your first network hop, then the "ends" of your "end to end" encryption are not the actual ends. The trust boundary needs to be pushed all the way up into the application on both sides. Some sort of global PKI like what iMessage uses under the covers?