Today it isn't verifiable. That's exactly what TEE attestation fixes. Until that's deployed, yes, you're trusting me.
For testing, dev work, and ephemeral agent flows that's a reasonable tradeoff for the convenience. For valuable wallets it's not, and you should generate locally, until TEE attestation ships, at which point these keys become safe to use for valuable wallets too.
