I don't think blue wallet itself can become compromised unless blue wallet pushes an update through the app store themselves. If they did and I was given fake addresses in the app then no amount of checking the address, whether server or on a screen, is going to catch it.