Comment by astrange

That's not quite enough but yes.

(You need to prove that the system is showing you the server your data is present on, and not just showing you an innocuous one and actually processing your data on a different evil one.)