There's also the implicit agreement they won't malware you, but they already violated that one good and hard.