is there a way to verify if a custom bootloader is on my stick?

solo1 key verify
output:
Register valid

Does that mean the firmware is valid and the secure bootloader is on the stick?
Couldn't a man in the middle (European vendor) flash the hacker version, change something in the bootloader, and then modify it in a way that the upper output says valid?