So, trust your bunker provider or run your own bunker. To me, this is a pretty easy model to understand. 

The bunker implementation can definitely be improved and become more paranoid but I think the trade-off for brand new users to get up and running super fast is worth it.