Could you elaborate on what I misunderstood so I can learn please? They claim tls encrypted tunnel, which is an end-to-end encryption isnt it?
Do you mean that the data itself is not encrypted? What is the significance of this compared to a tls tunnel?
If it somehow got mitm attacked they could snoop the unencrypted data?