Yeah, Web of Trust is a fancy word, and easier to say than to implement properly.
Agree.
At least, some #nostr clients (as Amethyst) show a "purple check" to my follows, so that I can differentiate impersonators:

That's much better than any DNS-based "verification", imo.