Treat Retrieved Text as Untrusted