It's a rational assumption and should be taken in to consideration to the extent any particular threat-model should or shouldn't.