Yes, they should. Even if they delay use of updates by some months, that should be enough to make it not worth adding fake stuff.

I wonder if this is possible at the server side. If niantic clients are identifiable, maybe OSM can serve them an old copy.