Questions about canton node

How to ensure that using official centralized nodes can avoid fake transactions or similar issues, such as if the node is hacked?

https://api.cantonnodes.com is an official node or not?

We can both use scan api and ledger api with the official node after adding ip whitelist, right?