Programs shouldn't make assumptions, yes, but they can and will.

In my example, I think it matters not who broadcasts a malicious event, but from where in the relay graph it is broadcast.