That's definitely how it seems.
If a cloudmining project wants to gain people's trust, they should set up some smart contracts so the payments are automatic and the scripts are public. Otherwise, people would just be betting hundreds of dollars on their word.