They don't have to, generally speaking. OpenSea does that for them, and issues a blue checkmark to items belonging to the collection of the verified key.