definitely the ideal solution. I'm much more ok with friends reporting media domains instead of pubkeys themselves which isn't effective anyways because they are often randomly generated.