I’d be willing to bet that you already take reasonable steps to reduce the likelihood of threat actors ending up under your bed at night. My point is simply that relying on people you have no formal relationship, and haven’t screened in any way, to have your best interests at heart simply because “what are the odds?”, is a rather stupid approach to security. Especially when you’re making such a compromise simply for a little bit of cheap virtue signalling.