It's interesting there's no remote attestation the other way around, making sure the server is not doing something to your data that you didn't approve of.