The frontend decrypts the email content so they could just change the code at any point at siphon off the plaintext. Also, I don’t think people understand that

The frontend decrypts the email content so they could just change the code at any point at siphon off the plaintext. Also, I don’t think people understand that PM is not fully encrypted. For example, email subjects are stored in plaintext and sent by the backend.