Better your threat model depend on that assumption than mine.