That's actually already a problem, for the same reason that you can backdate a blog post on your own web site: you're the one setting the timestamp. The solution has been for AppViews (which provide an API to an app) to record the timestamp that they first saw a post on the network and trust that.