light nodes are able to check the block header which contains the merkel root and if anything was manipulated, the root would have been changed.
with all that in mind, why do we still consider them not fully trusted?