I mean it makes sense for error reporting. Lots of apps automatically report errors so that they can be detected easily, which would require internet access.
About the trust issue. There’s no more or less trust than running on bare metal. Sure you could compile everything from source but you probably won’t, and you might trust your distro package manager, but that still has a similar problem.