Correct, THAT'S WHY by default the position IS TO ASSUME no verification until verification.
THAT way I never get compromised and it's known as being Fake & Ghey until legit. I wonder why mindless automatons have forgotten how establishing trust works?