I understand but I read the statement differently. It's a description of their security model simply. Sure they could be lying like any other company, so a certain amount of trust is required.

Unless you read and compiled the code yourself and run it locally, some level of trust is always required.