It’s the responsibility of the manufacturer.Â
Before you allow your blood pressure to rise from my comment please allow me to explain.
When you purchase a Ferrari, either new or vintage, the owner is entered in a registry so every owner is verifiable. The registry also contains maintenance and provenance data. Enter the VIN on the registry and every single detail of the car appears. If the last address doesn’t meet or match the current owner then you can be suspicious.
Pass Labs does this, McIntosh I’m not sure.