The server provides the data to authenticated users and helps facilitate pki between the clients.
If someone is added by the server to have access to the data but wasn't given a key capable of decryption by an actual user they wouldn't have actual access, just encrypted data.
Lighter weight and they have made a lot progress on federation