If you can't trust one of the largest SSO provider on the internet who can you trust?