True, there is trust and possibly some custodial risk. I can't wrap my head around thier security  model, like how can I conform on the device the transaction is what I want to do.