E2EE security risks