What Arthur is saying is that 2. cannot be trusted.

The app could show you these icons of the verifiers without them having really verified anything.