This over reliance on Chainlist is going to come back to bite us big time. Nobody is verifying, just blindly using it to add RPCs. Even seasoned pros. This is a very dangerous and stupid practice. Wallet devs are missing a massive, basic security issue and going down a rabbit hole chasing ever more complex tasks. Man with a hammer syndrome!
There should be automatic verification in wallets like MetaMask that should consult say 3 extra sources.