Yes, they're trusting it that much (
https://developers.cloudflare.com/workers/reference/security...). This is nonzero controversial. Of course, spinning up a new isolate takes more than zero time, but it's quick enough that handling it in parallel with the TLS handshake eliminates most of the cold-start time (
https://blog.cloudflare.com/eliminating-cold-starts-with-clo...), and also it's less likely to be needed if there's already an instance running
somewhere (
https://blog.cloudflare.com/eliminating-cold-starts-2-shard-...).