this is where NIP-05 comes into play. the real #[6] could register a NIP-05 ID against a domain that we all know that he owns. this is why NIP-05 is important.