Looks like a lot of clients and relays aren't validating signatures.

My note import tool has found hundreds of notes served by relays with invalid signatures...