“The user is assumed to be trustworthy.”