Web of trust can be poisoned by a single weak spot. It’s up to the rest of the network to report it and for clients to utilize reports. It’s something I want added in Damus.