That's a good question! I wonder if the data sent over MFi is signed/encrypted (which would prevent a MITM attack). I could totally imagine it!

But at least it somehow protects against a fake accessory with some malware in it, because the accessory has to be authenticated (that I'm sure of).