I think if anyone is important and influental enough, they could find a way to have their own specific domain and verify their nip-05
But I as a nobody don't need to bother with it if I don't know how and don't have the meens for it.
I just get one from Iris and be done with it
I own my own nip-05 domain. 🤷🏻♂️
As long as the Iris version doesn't allow anyone with your keys to change it, it should be fine. The thing you want to avoid is to tell all your friends the iris address IS you and then your keys leak and the attacker not only gets your keys but also your NIP-05. All your friends will think they are talking to you. Not only because it comes from your PubKey, but also from a valid NIP-05.
Ideally the password that allows changing the NIP05 is completely unrelated to your keys, managed completely separately.
