These are sad times ... when you basically can´t trust anyone ...
Theoretical ... any provider/creator could be hacked ... or an imposter ... or just a scammer ...
The only solution is ... do not rely on your automated security software ... always double check manually ...