6 points
I think there is levels of trust.
I am often able to reach of level of trust to believe a company is not straight up lying about the code they are running on their servers.
I am not often able to reach a level of trust to believe a βtrust me broβ from a company (especially if that statement is not qualified in a meaningful way).