yes, if NIP-42 is implemented FIRST AND FOREMOST you can ensure that only a user with the private key for an NPUB can upload stuff

just flogging a dead horse here because seriously nobody is paying enough attention to these things and they are enablers for nostr as a self-sovereign protocol

no money for providers, then you are subject to VC and spook black budgets to run your systems