Can they? I believe SSH key bind the public key auth to the server identity, so this kind of MITM is impossible.

(Just don't turn on ForwardAgent)