> Then what difference does it make if someone you don’t trust is involved? You don’t trust anyone anyway. If your systems work, they work.

This is where "Eddie's" argument falls through imo. Never assume your system works perfectly. Use every piece of supplementary information you have. Including knowledge of whether someone is willing and able to break the system.