I went down a rabbit hole of "how would I build a website that allows people to exchange some piece of information with me not having access to it" and found out about #passkey PRF which should in theory support 2 web clients to exchange e2e encrypted messages. Support seems spotty for now, but for those that care - it would give an option of "You can log in and exchange info and website operator knows nothing".