It’s good to think “win win” and trust everyone.
However, I spent a few years in nuclear cyber-security and one of the key aspects of security is to think like an attacker.
Granted, nuclear cyber-security is pretty heavy-duty, but this helps even in simple every day scanning of Craig’s List … how do you avoid scams?