that’s how the spec works.

that public key is from the key that signs the zaps - that’s basically confirming that the payment was received.

clients can validate that