You'd better trust them with your metadata, unless I'm misunderstanding their protocol.