Seems pretty pointless, unless I'm missing a key point (perfectly possible)
No, you got it. Any case where the keys used for E2EE are not created and managed out of band by the client is not really E2EE. If a server can update the code used to manage the keys i.e. javascript it can also swap out keys, obtain keys, etc... Everything a lawful order to intercept would require.
Comments
Seems pretty pointless, unless I'm missing a key point (perfectly possible)
No, you got it. Any case where the keys used for E2EE are not created and managed out of band by the client is not really E2EE. If a server can update the code used to manage the keys i.e. javascript it can also swap out keys, obtain keys, etc... Everything a lawful order to intercept would require.