The secure enclave cannot be more secure than the software running inside it.

As for the trust, we generally trust the CPU manufacturers, including their implementation of encryption like the AES instructions.