I appreciate your statement that NIP05 “verification” from a “trusted” (by some other means) domain carries a lot of weight in “vouching for” pubkey. But still… your OP statement is problematic.

> “If you own the website, you can prove that the owner of the website also owns the private key”

NIP05 on its own (aside from the credibility of the issuing domain) does not “prove” private key ownership.

I love you Mike, but srsly.