even on nostr:nprofile1qqs83nn04fezvsu89p8xg7axjwye2u67errat3dx2um725fs7qnrqlgpr3mhxue69uhkgctkv5h8xapwvajhymtp9e5kutmwdaehgusqhknul, best practice would be to only install apps signed by the developer.