You could do everything client side as well and just store encrypted indices on the server. Probably not a good idea, but not the end of the world.<p>I don&#x27;t think users actually care though. Google&#x27;s attempt to redefine &quot;end-to-end encryption&quot; to include decrypting something mid route bothered me. This... meh.