this feels like vpn all over again. the location shouldn't grant any inherent trust.