Your Risk Scores Are Lying: Adversarial Exposure Validation Exposes Real Threats