> You do not trust the service provider. To be consistent, you do not trust the software provided by this provider. These are completely different threat model

> You do not trust the service provider. To be consistent, you do not trust the software provided by this provider. These are completely different threat models. You're saying that since you can't have bulletproof security, you might as well have none. This is simply not the case.