John Z Black
Brunswick, ME • (207) 245-1010 • contact@johnzblack.com
Two things happened at Meta this week. Both are real. Together they say something pretty uncomfortable.
First: Meta quietly removed end-to-end encryption as the default for Instagram DMs. Billions of conversations, now readable by Meta, available to law enforcement on request. The stated reason: users weren’t opting in voluntarily, so Meta un-defaulted it.
Second: Moxie Marlinspike – the cryptographer who built Signal, who has spent his entire career making surveillance harder – announced a partnership with Meta to bring end-to-end encryption to Meta AI. The chatbot gets the encryption. The billion-plus people sending each other messages on Instagram don’t.
Take a minute with that.
Making E2E opt-in rather than opt-out means most users will never turn it on. The practical result is that most Instagram DMs are now in plaintext, readable by Meta, and accessible to any government that sends a valid legal request. Meta blamed users for not choosing the feature. That explanation requires believing the company that engineered one of the most addictive apps ever built simply couldn’t figure out how to get people to click a button. Not convincing.
The more convincing read: government pressure worked. The EU’s Chat Control, the UK’s Online Safety Act, years of US law enforcement frustration with encrypted platforms. Un-defaulting E2E looks like a business decision and functions like a policy concession.
Security experts aren’t being dramatic when they call this the first major domino. Once a platform this large voluntarily steps back from E2E and survives the news cycle, the argument gets harder for every platform that follows under political or regulatory pressure.
WhatsApp still has E2E on by default. For now.
If you’re using Instagram for anything sensitive – and a lot of people do, including people in genuinely dangerous situations – move those conversations somewhere else. The default just changed, and not in your favor.