I am more and more tending towards a default trust model of "trust everyone, but trust nobody fully"