To convince yourself that this is a very poor argument, you just need to replace E2E encryption in the post with “password hashing”: “What's the point of hashin

To convince yourself that this is a very poor argument, you just need to replace E2E encryption in the post with “password hashing”: “What's the point of hashing the password if an attacker can just catch the password when the user logs in, or change the server code in order to disable hashing altogether”. The things is that “attackers gaining read access on a database” is (unfortunately) a much more common threat than “attacker can execute arbitrary code on the server instead of the application for a long time”.