@dump_stack @rysiek

This "give out the keys" might also apply to a widespread law enforcement practice of planting tailored client apps through Google Play Store for targeted clients. If E2EE is implemented in the client app then the client app can just as well leak the keys through a side channel.