It does depend on a malicious party gaining access to the servers. In that case they could also update the code and leak the password directly as many people p

It does depend on a malicious party gaining access to the servers. In that case they could also update the code and leak the password directly as many people pointed out in the ars thread. It's still a lot better than no e2e as with Google and Microsoft. I always use cryptomator on top of OneDrive. I'm thinking using it on top of mega instead might not be a bad idea at all. It's still an extra layer even if it's breakable. But not sure if I'll trust mega to stick around. Pretty sure the suit around Kim Dotcom's extradition is still going on.