I trust the developer too, but the developer isn't the only person you must trust when you accept wide ambient permissions. You must also trust the entire supply chain.

I see it as good hygiene to remove wide ambient permissions.