End-to-end encryption to protect all keystrokes and cursor movement in real time.
Is this satire? What is the remote 'end' to which keystrokes and cursor movements are being sent that needs encryption? And why are keystrokes and cursor movements being sent anywhere?
Do they just mean that they use TLS for their web apps (in which case, that's table stakes)?
For keystrokes and mouse movements encryption isn't sufficient, you need to add noise or traffic analysis can reconstruct them with high probability.