Let's say you see a contract on Etherscan and assume the code is good, so you send a transaction based on that assumption.

If Etherscan lied, and the contract was malicious, you'd be f'd. It's good to double check contracts across block explorers if you can't view them yourself.