Not if there’s a P2P verification or some anchor to a trust…

Not if there’s a P2P verification or some anchor to a trusted Twetch set by the reader. Can’t forge signatures of data.

But yes, the interface can cheat, not the data if verified with some client side checks.