The security notion of "untrusted" is confusingly named.

A layperson might view "untrusted" as a bad thing.

But actually it's a good thing!

What it really means is "a thing that you don't have to trust", which is good!

The more components that can be untrusted, the more rigorously the system works!