I think this is a fair measure. Why would you use an 3rd party that isn't secure?
The fees of deposting aren't that big (well not for the methods I use), so why would you put your trust in a third party if you don't know them.
Other case would be if you buy peds from an IRL friend you trust, but I don't think
MA cares for that or even is able to check that out for that matter.