Meta still controls all the code running in the web app. They may be scraping your messages just like they have the option on Android.

It can still be end to end encrypted with them sending themselves a copy from the unencrypted text boxes you see