About the trust thing - you probably don't often compile code without running it afterwards even now. A format call might be hidden in any library you use.