It isn't about being untrustworthy: I don't use Facebook, I use many other things but not Facebook. If he has the code to handle Facebook logins, he has the code to handle Google logins as well.