Response auth token verification

I noticed that the response auth token is not verified when handling the response from the wallet. Is this on purpose? Stacks.js does some verification: https://github.com/hirosystems/stacks.js/blob/master/packages/auth/src/verification.ts#L211

The documentation does not say anything about it: https://micro-stacks.dev/guides/stacks-apps#authentication