If you trust them with your keys, why not trust them with your plaintext? At which point, why bother with E2EE at all? The answer should be "because one day w

If you trust them with your keys, why not trust them with your plaintext? At which point, why bother with E2EE at all? The answer should be "because one day web browsers will be able to pin specific versions of specific web apps, with specific hashes, corresponding to specific releases tagged in their repo, which have been audited by a certain threshold of auditors that I trust". What that looks like in practice is probably some mixture of the following projects: https://github.com/kpcyrd/pacman-bintrans https://github.com/kpcyrd/pacman-bintrans https://users.rust-lang.org/t/rust-code-reviews-web-site-for-cargo-crev/44480 https://users.rust-lang.org/t/rust-code-reviews-web-site-for... https://paragonie.com/blog/2022/01/solving-open-source-supply-chain-security-for-php-ecosystem https://paragonie.com/blog/2022/01/solving-open-source-suppl...