Hey, to clear something up; getting a NIP-05 'verification' has nothing to do with your nsec. (If you ever needed to give your nsec for a verification to anyone consider your account lost)

About NIP05:

Your account is made with a public key, which is very long and confusing. In order to make 100% sure you are talking with the person you think you are, you should check the npub key. Dont trust, verify, right? To help in this process there is the NIP05 verification. Your npub is made simple; kinda like an email-address, easy to read and fast to check.

Because your npub is linked via a domain to your NIP05 the client you are using will do the npub check. Only the owner of the account with the linked NPUB will show a valid NIP05, any other account will show it as invalid.

To clarify; This isnt linked to twitter, your profile name, your email-address or anything like that. Really just a way to make your npub easier to check and to see a nice checkmark in most clients. Your npub is never needed for this proces. All the provider needs to do is convert your public npub into the hex variant and add it to a file on their domain.

You are in control to use it, as you are the only one who can edit your profile and set, edit or remove the NIP-05 part.

Also: The NIP05 is very easy to automate and can even be done with free domains, so in my view in no way a valid anti-bot method.