BitBox02 verifies that the change output is an address that’s part of the wallet, preventing attackers from diverting the change output to their own address.