For an app claiming end-to-end encryption, what is the minimum evidence that would actually earn your trust?