You're right. Better keep to not asking and just weirdly spy on them, concluding the emergency recovery buttons are never used, and remove them.
I read your response as “okay then, if we can’t ask that question, we have to spy” etc. which I think did not follow from my post - I misunderstood you, thanks for clarifying.