Comment by dredmorbius

GPG's trust model is outside the transport layer, via signatures.

Not foolproof, but it answers your objection.