ok, but ultimately many protocols don't provide for the ability to store an attestation. github does, but telegram doesn't, for example. and it's a combinatorial problem because how do you keep them all updated across many accounts?
so you have to constrain how wide you throw the net. some can't be verified, others can be.
anyway, fuck pubky. it's unnecessary, and will die like all altcoins eventually die, because network identity shares properties with moneyness.
if the nostr profile event contains all the outbound references to other protocols, teh other protocols can just refer to it and cover all bases.