How can collaboration without E2EE be considered "secure"?

(I'm aware there is a plugin but E2EE is definitely not built-in)