When it come to security (and literally everything else), don't even both with with the "trust" part and skip directly to "verify".