Indeed. The FDA just has a multi-step process where you need to define how you'll run your trials, what data you'll collect and whether it's enough to get approval.

The FDA very carefully reviews the submissions, requires validation of tests and safeguards so data can't easily be manipulated. But the system is built on trust. If a company wants to manipulate, fake or exclude negative data they can. They'll likely get caught, but not always.