The money and network can be trustless, the users are a different story, if you don't verify before you click sign, your rugging is your own responsibility  

 Exactly. Verify everything.