It’s really easy to change the @ in Nostr, the npub is the only thing which really matters in verifying your identity