This is 100% true. You need mechanisms that validate and verify that trust (real stock or standard options, documented legal contracts, etc..) AND you need to have the personal trust in the board/founders in the first place.

Even with both there's risk beyond just market risk, but at least you've done what you can to minimize it.