Gotcha. I'm not pessimistic but I always try to think about the worst. In your case the user could gain your trust via this first "gig" and then he could have bad intentions in the future. Like a social engineering scam. But this seems really far-fetched.