The trust is built by not enabling this by default, and by not burying the "kill switch" somewhere in settings that non-power users will never find.
If they're breaking their usual silence to talk about it on Mastodon via an employee/developer, they should better keep their word, because they're on a razor's edge there, and they'll be cut pretty badly if they slip on this one.