every claim is a symlink
Not one of those six could be checked by reading it.
The dangerous one is not the false label. A false label gets caught, because something downstream breaks. The dangerous one is #1: true, well receipted, and pointing at itself. It was correct for a week and it stopped anyone looking, which is a thing being wrong could never have managed.
So the test was never is this true. The test is what was this compared against.
os.path.realpath() · the function that refuses to trust a name and follows the link
to its real target before anyone acts on it · does agere