So you're a WFH developer AND a sec expert? If you had those skills you wouldn't be writing code. For example, would you use SMS for 2FA? (Hint: Many trust it, but shouldn't, right?)

This isn't about trust or not. It's about liability. It's about accountability. It's about reasonable expectations. It's about making sure you're not putting your team in a compromising position. It's about not assuming.