Ah the source is the witness feed.

https://peakd.com/me/witnesses

So yeah the people who run Hive could hack the data quite easily, but it would be painfully obvious and they'd lose their position as a consensus witness, basically losing all reputation and all the block rewards. Of all possible attack vectors this is the one I'm worried the least about.