E2E encryption doesn't matter when you can't trust the actual host in the first place.
Not referring to Tuta specifically, but isnt that the point of E2E encryption? That you have assurance even if you don’t trust the host? Unless they don’t demonstrate and publish what encryption mechanism they use of course.