pull down to refresh

Who you should trust is up to you. If you don't mind them rugging or shotgun KYCing you someday (assuming they haven't KYC'd you sneakily already - email/ip/name), then trusting them is fine.