Indeed. The interesting thing here is that "the users" in this case are the vary same progammers who one has no option to "trust"(*) in writing the code to manipulate that same data.

(*)Where trust is defined as putting sufficient safeguards in place to ensure the results of their manipulations are correct.