Yes, this is what I meant. Unless we think of some magical way to verify that e2e is really happening (enter quantum voodoo or something similarly wild), the only way to verify is by actually inspecting the source code. Even this may not be enough, but it is a necessary precondition for now.