probably "returns an untrusted array if self is untrusted" reads better.