What is a common mistake when working with RAG citations and source attribution?

Showing retrieved sources that do not actually support the generated statement can create false confidence.