You are 100% correct and it's sad others cant see it. Tofu, like with ssh, is a valid strategy. Trusting third party providers is decreasing safety compared to

You are 100% correct and it's sad others cant see it. Tofu, like with ssh, is a valid strategy. Trusting third party providers is decreasing safety compared to only having you and the service.