Re: "End-to-end encryption" isn't?
"So, not only were the comms not encrypted end-to-end, as is often claimed, but, if I understand correctly, there was no way to securely exchange encryption keys"
They may well have been encrypted end-to-end but the keys were compromised.