Exactly. Even major “trusted” third parties like Adobe can’t actually be trusted to keep their fingers out of parts of the system they have no business poking around in. Time and time again it’s been proven prudent to treat third party devs as hostile parties by default, with trust being hard-earned.