verify secure bootloader

is there a way to verify if a custom bootloader is on my stick?

`solo1 key verify`
output:
`Register valid`  

Does that mean the firmware is valid and the secure bootloader is on the stick?
Couldn't a man in the middle (European vendor) flash the hacker version, change something in the bootloader, and then modify it in a way that the upper output says valid?