Why End-to-End Encryption Cannot Protect Infrastructure Metadata