I have overlooked that non-obviously formatted parenthesis, so I must correct myself: the check for `PossiblyHarmful` needs to be done regardless of `UntrustedMode`.