You can trust hosted things as long as you trust the deployment targets. Or, more specifically, have a trusted relationship with the deployment target.