So the concern here is the node behind the ln address may be replaced deceptively?

Perhaps a better option is clients' checking ln address against a cache of node public address. And warn the user if there seems to be a change. Change might be an innocent technical necessity or a deceptive one the users may decide themselves.