You're missing the point.
It's not that it might tell me the wrong version number.
It's that xz is not particularly dangerous as long as it's just a bunch of files on my disk. It's when you _execute_ the code in these files that it can do harm.
So don't execute it unnecessarily.