which would make it easy to verify through digital signatures that the other device is who they say.

The entire tech industry has a long history of security issues, bad practices, mismanagement of security critical resources (openssl,...), horrible hacks with security issues that where widely discussed beforehand (http tunneling), etc. . The only fake story I could see from a mile away would be "Company publishes flawless auth system, hackers forced to retire".