except the one with selfsigned certs doesn't really make a difference, and even for the last one as far as i know they still decrypt and recrypt stuff with their own key to be able to do caching etc.

Meaning, it's still not end to end, which is what you would expect when you hear SSL. Where are they upfront about that?