I think there is levels of trust.

I am often able to reach of level of trust to believe a company is not straight up lying about the code they are running on their servers.

I am not often able to reach a level of trust to believe a “trust me bro” from a company (especially if that statement is not qualified in a meaningful way).