I'm late to reply here but kind3 of a trusted npub is good enough to assume that an npub isn't a spammer which is all I care about at the relay level. Sort of a bare minimum trust implemention that can easily be improved but already does a lot for us when it comes to stopping spam