even if all meta employees see the source they cannot read messages as long as keys as generated on-device, which is verifiable

My point was that all meta employees seeing the source means that there is a non-zero chance that one of them would realise if there was a backdoor.