They said they only want to control one of the ends

Fair enough, but the Immich provider they link to also uses SSL and claims to encrypt at rest.

It they don’t consider that e2e encrypted, literally nothing is then…