When an Internet Computer app says "this is your principal, add it as a controller" or "this is your address, send funds to it", how can we verify that information in a trustless manner?
How can we detect when a bad actor is showing us information that isn't our own? Use Ledger?