Can anyone add anything, like any account add info for any JSON data and imitate an app, such as adding bogus data?
Yes, that's why there are lot of invalid "follow" json in the blockchain and apps should double check both the author and the content