If you are connecting over TLS, the server is already trusted and I see no reason to validate the response. The theory may be the ability to tamper the response before it hits your code (such as in SDK), but even then a malicious SDK can make everything look legit.