When using PGP, you have to decide how much you trust each key. All that PGP does is enforce your trust preferences.