> I think they are saying the signed ID can be copied to another device.
But that's not what a forgery is.