> You need to securely get the code and resources to the browser. A state level attacker can make this very hard. Even worse, you need to securely get code to

> You need to securely get the code and resources to the browser. A state level attacker can make this very hard. Even worse, you need to securely get code to the browser without trusting yourself. The E2EE model assumes that you (the service provider/app maker) will turn evil at some future point. Code distribution is hard enough if you can trust yourself. Its basically impossible if the threat you are protecting against is your future self.