Every time they say "trust us" they publish a whitepaper with technical details explaining why and how they can be trusted. They're generally very good about these things.
You still have to trust the parts you can neither observe nor reverse engineer. So, everything organizational and everything that happens on their infrastructure.