CCV's VSCMaturedPacket: What are the trust assumptions?

[insumity]

Problem

Clarify the trust assumptions we currently make for CCV. For example, can we trust the consumer chain when it provides the height of when a VSCPacket was applied, etc.
Write a document with all the assumptions currently made and what assumptions might be needed to get rid of the VSCMatured packet.

[insumity]

Closing the issue because we reached to the conclusion that we cannot remove VSCMaturedPackets as is without potentially compromising the security of 3rd-party-chain light clients that track a consumer chain. This is shown in this document.