Encrypting your .env file with dotenvx, or something similar, can help mitigate this need for trust.