The OP isn't surprised they don't use E2E encryption - that's mostly reserved for the most security-conscious use cases, because as you say, there's a lot of usability to gain from having read access from the server. However, at-rest encryption is a total no-brainer.