Comment by chmod775

Yes, they do. There's nothing in the spec this app implements that actually requires that step. The app just chooses to do it in this case.

Or rather is planning to. Right now it doesn't even have that integrity check, despite fully implementing the verification flow.