Weak.

But what are good ways to actually verify that a particular npub belongs to a particular person?

It's going to become a lot more difficult as more people and bots enter.

I think it was easier for those of us who were early because we were mostly all part of the same relatively small circle of people. I just followed based on the fact that someone I follow followed them. This way makes assumptions that may not always be true.