The correct approach is to introduce a mechanism where one nostr identity can sign a piece of data identifying and rating another (forming a web of trust). It worked for the old days of bitcoin p2p sales, and will work fine here.