The problem actually isn't "the machine doing the cryptography can not be trusted" - the machine is basically you, the user, obviously once you have your files they're on your computer. If you don't trust your computer, what use do you have for files in the first place.

Problem is actually "the computer that sends you code to run on your PC can't be trusted". Big difference..