One fault of this argument lies in the assertion that every E2EE auto-updates. IOW, if you decide to stick w one version that is shown to be without a doubt E2

One fault of this argument lies in the assertion that every E2EE auto-updates. IOW, if you decide to stick w one version that is shown to be without a doubt E2EE then certainly you are better off than with just TLS. Furthermore, this article only focusses on in-transit encryption (TLS). What about encryption at rest? It can perfectly be viable to have an E2EE service provider keep my data stored in zero-knowledge fashion. Lastly, typically an E2EE service provider's reputation and business rests on keeping their word. There is not a whole lot of incentive to break it, given the jurisdiction they reside in allows them to refuse compliance w secret services. IMO this is fear-mongering. At the very least equating even this supposed "snake oil" E2EE with mere TLS seems out of touch w reality. I wonder if the auther himself personally too avoids E2EE messaging services.