its tricky because to do it right it would need to be tied to web of trust, because people can fake zaps to their own notes (you can't fake zaps to other peoples notes)