Every system has some number of malicious actors. You should trust, but you must also verify. If a system designer assumes no bad actors exist, the system will be quickly exploited, which is why voluntary mask mandates and distancing rules didn't work. We have locks on doors, passwords for computers, seat belts in cars, and rules against drunk driving, precisely because of a small number of dishonest and reckless people.