Someone can do that now. They can take anyone's picture and name and register on nostrpleb. I thought the whole point of getting NIP-05 verified was that you control your verification on your own domain.