Well if they don't claim it, then they shouldn't try to verify and let it mark as "verified" anyways. If they do claim it then they should properly verify sign

Well if they don't claim it, then they shouldn't try to verify and let it mark as "verified" anyways. If they do claim it then they should properly verify signatures Either way is wrong.