Because you have control over the domain, and the nostr.json file, that the nip(s) point to the correct pubkey.

Ie. You are not getting rugged.