Comment by timschmidt

Better your threat model depend on that assumption than mine.