Even though it's a webapp it can be end-to-end encrypted. Fortunately, they are planning to do it, but I am not 100% convinced that all the function will work on e2e notes.