What do you just trust without verifying?

Just realized I never actually checked if nostr.build actually removes metadata from my images

Anyone else ponder where they have trusted but haven’t verified?