Bitcoin has a trusted bunch of bootnodes hardcoded into each client. If they act poorly, its trivial to swap them out. Just like its trivial to swap an exchange rate oracle.
Not really. It also fetches new bootstrap nodes from DNS servers. But neither is very much trusted as it takes only 1 valid connection to relay other valid network addresses.