Well the crux of E2EE is authenticity, so yes. Key distribution is a fundamental problem of public-key cryptography: you can’t get my public, authentic identity key without trusting someone to not tamper with it along the way. We implicitly trust [Zoom|iMessage|Telegram|...] to do this.