Yeah! I think there is an opportunity here to build some unique features to solve this problem. NIP-05 goes a long way IMO, but not everyone has one, and impersonators could start buying domains and setting up their own NIP-05 identifiers. It would be costly for the scammer but a single domain could be used for an immeasurable number of impersonator accounts, ones that target multiple victims 🤷🏻‍♀️

Totally agree though that there are UX improvements that could go a long way, similar to how Twitter really pushes you to only look at notifications from verified accounts.