Those apps generally distribute keys, and E2E is if no help unless you validate those keys out of band. Do you, really?

Then there are all the ways, both white and varying shades of gray, of installing software in the end devices. That's your primary threat right there.