From the Validation section, is this part backwards? `Anytime data is passed from a trusted source to a less-trusted source,...`