but IRCv3 still has no E2EE
i don’t see that as a real issue with groupchat in particular because the fundamental problem that E2EE tech alone dosen’t solve is trust. take matrix as an example: absolutely nobody verifies the keys of every single device in the chat and nobody will notice if a privileged server entity silently adds uninvited members.

you’re already self-hosting. maybe even via tor. everyone is using TLS with SASL auth. if you verify the server’s certificate you get pretty much equivalent security in practice, because the thing that gets you doxxed and v& isn’t the lack of end-to-end encryption. what gets you 100% of the time is moles, snitches, glowies and people with rootkits on their phones.
1

If you have a fediverse account, you can quote this note from your own instance. Search https://shrimptest.0x0.st/notes/ajvnm3ssfp3tp3bc on your instance and quote it. (Note that quoting is not supported in Mastodon.)