We've been addressing this by taking all of this 'trust' out of the equation at IPv6.rs which is all in the open [1]

</shameless>

[1] https://github.com/ipv6rslimited/