Imagine a few really big public figures join nostr. They start posting, and then since usernames are not unique, scammers change their profile pic and username to match the celebrity and hijack threads to scam or just to cause havoc.

This will eventually happen and could really hurt the experience on nostr.

Seems like including the verifying domain under each the user profile on each post would help.