What they could do since they have both a client and the server is make the client encrypt all content that is uploaded and decrypt it when downloaded by those who have a shared decryption key. Wouldn't that make sense?