Well, to play devil's advocate, at WORST it can be maliciously made to misreport balances.  That's where the trust comes in, that the blockchain reporting to mycelium is the same blockchain everyone else is working with.