Assuming positive intent is the right (optimal) place to start.

Over time the bad actors inevitably expose themselves. They might not face negative repercussions from higher up, but at least you can then plan accordingly.