Are clients verifying the authenticity of zaps? Probably not, it is too cumbersome. Cashu-based zaps would probably make that much easier..

Impossible since people can just send between two wallets multiple times.