But isn't it remarkable that Telegram after all of these years still doesn't do E2EE by default, Telegram rolls its own crypto (of which the first version had significant problems) and still Telegram is used so much in Russia?
Minor correction. Telegram does not use its own crypto, it uses well-known cryptographic primitives. (However community criticised telegram for the poor choice of those well-known primitives)