That's why zero trust itself is so important. The only way it can be guaranteed is to have an open standard that is zero trust, so nobody is able to abuse it and the lay person doesn't have to trust anyone. Not to mention if it is implemented correctly, there is no data to even trust them with, given there was zero knowledge of the end user. It would require a governing body to be competent enough to implement it, but I like to dream big