I don’t think most clients are verifying signature 😬 but I would love to be wrong about this. This is and should be happening at the relay level, but there is a client performance tradeoff doing it at the client level.
What I’d love to see if verification of every event isn’t possible client side: 1. Verification on profile metadata before someone zaps someone else 2. The ability to “verify” any post on demand if the contents are suspicious or really on any event containing an invoice