trusting an oci repository is the same as trusting a distro repository, if its a dodgey unknown you got from got knows where and you cant verify, dont use it