Training user to blindly trust when such events might happen?
No easy solutions, sure.
Maybe signed archives can help to get some distance behind us?
A question of trust and corollarily being trustworthy.
And nobody knows everything. Not users nor engineers, especially so when still somewhat inexperienced.