OK, yeah, you have to trust SOMEONE, but it makes a big difference who the someone is. Trusting a reputable registrar is a lot different from handing over total control to Joe Random web developer. I have a feeling that the case here is closer to the latter than the former.