You’re right that identification is not verification. But each NIP-05 domain owner can decide what they want to do before linking an npub to a domain address. And that linking could include a verification step. It’s up to the domain owner to decide their linking policies and other to decide how much to trust.