That's helpful, but not "the right way" because it's a pre-validated chain. A bootstrap.dat is "trustless" because the client validates the whole chain.