That came out wrong. It’s just a way to say that E2EE doesn’t matter if you’re in an environment or app that has control over everything until the actual message is encrypted and sent. Closed source apps are to be trusted much less than opensource apps in this regard.