Here's what end-to-end encryption protects—and what it doesn't.