It seems the tracker allows to mark test result for your own PR, see joomla/joomla-cms#28055 (comment).
A user cannot set the test result for his/her own PR.
The tracker should have all necessary information to block this, i.e. the github username of the user currently being logged in in the tracker and the github user name of the PR's author/creator.
Obviously it is possible to set the test result of your own PR.
Any kind of system ;-)
Not sure if this has been reported before.