color and last 5 digits cannot be spoofed without about 6 months mining
Well the pubkey color didn't help here.
Its not really meant to prevent impersonators, its more of a cool theme thing
But that means in going to need to add some other way to show who is the real nostr:npub1l2vyh47mk2p0qlsku7hg0vn29faehy9hy34ygaclpn66ukqp3afqutajft
I think the solution will involve usernames :)

Discussion
maybe a year