Some sort of verification is definitely needed. 95% of people have hosted nip05 by someone else as you sayin, that's like 0 verification cause host can quickly remove your badge and give the badge to fake account. I'm ok if domain is different than your username as far as you have access to change it by yourself, but access is hard to verify.