Questions about canton node

How to ensure that using official centralized nodes can avoid fake transactions or similar issues, such as if the node is hacked？

https://api.cantonnodes.com is an official node or not？

We can both use scan api and ledger api with the official node after adding ip whitelist, right?