I was reading about bridging Ethereum and IPFS and I stumbled upon an article that uploads the file to IPFS and records the hash of it as an Ethereum transaction. I then tried to understand the difference between a smart contract and a dApp from this answer.
From what I understood, a smart contract is part of the blockchain and dApp is outside the system of blockchain. So, my question is, given a dApp that uploads your file to IPFS and records its hash on Ethereum's chain, would you trust this app as much as you would trust the Ethereum chain?
In case "trust" seems to be ambiguous, consider my question as follows: Would you consider this dApp as tamper-evident as Ethereum? Would you trust it to share your credentials to record a transaction on Ethereum?
Some reading material towards the following question would be much appreciated: What would be the ideal-most way(steps) to upload a file on ipfs and record its transaction on Ethereum if not this one?