>And then there is the security issue of end-to-end encryption and the lowest common denominator.

There's nothing preventing companies from setting up non-encrypted bridges to satisfy the interoperability requirements and just say "we can't encrypt there, it's not on us".