Which is why you shouldn’t assume people are going to act in good faith. If acting in good faith was universal then we wouldn’t need any form os]f security at all. This is why you have to build systems that assume that there will be bad actors.