Having a 'secure' conversation definitely implies trust in Google/Apple, regardless of the Whatsapp binary behaving flawlessly (e2e encryption, solid PRNG, no logs etc.)
They could indeed serve you a different binary from the app-store. "Do you think that's Whatsapp you're using?"