The only party requiring trust us the one managing the database.
Wirks pretty well in the real world.