I will but a bit worried as it was under the Apple Id and don’t want whatever script it just ran to remain there after resetting.

I dont understand how it did that. Only Apple certificates are trusted.