Being unethical is, for better or worse, not automatically illegal. Saying that your product provides end-to-end encryption and you can't access message content and then intentionally shipping a backdoor (for your own benefit and not, say, that of a government that compels you to do this) would very likely be.