A tECDSA or canister signature can’t be forged by a single node since it relies on threshold signing (multiple nodes).