SaaS Provider Threat Modeling

Google Docs is not end-to-end encrypted because the merge has to happen somewhere

Four mainstream suites encrypt at rest and in transit and stop there, because a server has to read the document to reconcile two people typing. The fix exists, and it bills you in search.