By very definition, it cannot be "end to end" encryption if it isn't encrypted from one end to another.
NLP locally in the phone -- an AI that slightly understand what the user writes -- and if it's (I'm oversimplifying) like "kill all ...", then the AI bricks the phone.
Otherwise it's e2e as usual.