Granted - You do need to trust the server to that extent.
However, the client-side code will be open source and digitally signed.
It's not perfect, and you shouldn't use it for state secrets, but it's a damn sight better than anything out there right now.