Client issue for sure.

Seems like this one is a non-issue for me. If someone is talking with me then why would I care if they are impersonating someone else? I'm just glad to be talking with someone.

And my information threat model never assumed Nostr DM's were private anyway, since nothing stops the person I'm talking with from simply posting everything publicly themselves.