But yep, you get the nuance. The point is that the process eg Claude Code doesn't need to be "trusted" to behave.