diff --git a/CHANGELOG b/CHANGELOG
index fa9a9c106d..70aeedebba 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,5 +1,9 @@
 git-annex (10.20220505) UNRELEASED; urgency=medium
 
+  * Special remotes with importtree=yes or exporttree=yes are once again
+    treated as untrusted, since files stored in them can be deleted or
+    modified at any time.
+    (Fixes a reversion in 8.20201129)
   * Added support for "megabit" and related bandwidth units
     in annex.stalldetection and everywhere else that git-annex parses
     data units. Note that the short form is "Mbit" not "Mb" because
diff --git a/Remote/Helper/ExportImport.hs b/Remote/Helper/ExportImport.hs
index 71911889d1..d753dee66a 100644
--- a/Remote/Helper/ExportImport.hs
+++ b/Remote/Helper/ExportImport.hs
@@ -216,7 +216,7 @@ adjustExportImport' isexport isimport r rs = do
 		, untrustworthy =
 			if versioned || thirdPartyPopulated (remotetype r)
 				then untrustworthy r
-				else False
+				else True
 		-- git-annex testremote cannot be used to test
 		-- import/export since it stores keys.
 		, mkUnavailable = return Nothing