Think of messaging applications like WhatsApp, or password managers like KeeWeb, or email clients like ProtonMail. These all implement E2EE, but nothing in their web versions prevents the server from serving malicious client-side code that reads all your messages.

So far there haven't been many attempts to solve this issue. Swerve aims to demonstrate one approach.