I agree: the stated steps are what I’d expect.

I still don’t trust the company that made the decisions that led to that code being shipped in the first place.