[simonCGN]

I suppose you should do it the other way round: there is a rumour, you see if it is true rather than assuming it is true and try to find evidence if it is true.

[bboygravity]

What if there's no way to find out if it's true?

[yreg]

Then assume it is true when making security decisions, but don't pretend it is true when talking about it in discussions. (imo.)