There are different levels. Up to a point they take everything you declare as true in conjunction with some basic checks. At the highest levels they assume ever

There are different levels. Up to a point they take everything you declare as true in conjunction with some basic checks. At the highest levels they assume everything you say is false, until investigated and proven true. I still think the article makes a good point though, you just don't know who the hell has access to your data unless you keep it on your own servers or host the data in a country with extremely transparent privacy and law enforcement governance.