Wrong claim
Why it feels true
A padlock on TrackPort looks like proof the phone is talking to Riverstone.
Precise correction
Transport Layer Security (TLS) 1.3, defined in RFC 8446 (August 2018), protects the bytes of a session and lets the client check a certificate for the name it asked to reach.
That check does not decide that the name was the company the customer meant, and it does not decide which person or which shipment is allowed.
If DNS sent the phone to a lookalike and the certificate matches that lookalike, encryption worked for the wrong owner.
RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3 (August 2018) ↗
MINI-CHECK