But, that's still trusting the provider. The provider is likely to compute it at upload time and then store in meta data. So, having that meta result returned

But, that's still trusting the provider. The provider is likely to compute it at upload time and then store in meta data. So, having that meta result returned is no more proof your files exist than listing them.