Not all NIP-05 providers are the same. Some will give you an identity for free without any requirements, some only ask for a few sats, while others hand-pick real Nostriches with quality content or offer NIP-05 only to people they know in real life. Because of that, I proposed NIP-85 to create chains or webs of trust between identity providers: https://github.com/nostr-protocol/nips/pull/1210 It's pretty cumbersome, but I believe we need to find a way to treat NIP-05s differently based on trust; otherwise, NIP-05 would be almost meaningless.

Nostr identity and social graph are untouchable, you have them and you have full control. On the other hand, NIP-05 or attestations can be stripped by the NIP-05 provider.