My understanding is that law requires backdoor access [111], you cannot just shrug it off as "we are end-to-end" encrypted. You must have a backdoor or not allowed to operate in Russia.
You can maybe verify that the app doesn't currently send messages anywhere, but what if there's a way for Facebook to send a request to WhatsApp for a dump of all messages within a date range?