General extension design question

Doesn’t this only secure the connection between the EBS and Twitch? How do you know from your EBS that the data being pushed to it from the local software is from the actual broadcaster? Sorry if this is a stupid question, I still have a lot to read and digest.