CyanogenMod rolls out secure device-locating feature

The signatures and checksums do not verify that what is in that build is what that person says is in the build. You are still trusting on that.