It should be assumed that all core developers have nefarious intent. Their work should be verified, not trusted.