In some cases, like VanillaOS, the image root that needs to be verified is not in the actual root, but in a subdirectory (like ".system") Since some folders, like /opt, might not be identical to the image's /opt, a verify operation might fail.