>- Security: Can you read my customers' traffic?
Yes, anything that (re)terminates TLS will be able to - including this - and there is no way around it short of hosting it on-prem.
Marketing it as end-to-end security the way the author is doing is ... wrong.