Yes, most clients just check that the address works and show a check mark, which is awful. NIP 05 can be good for validation only if you already know what name/domain to expect. This can be ok for comparing data across apps, or in a Soapbox style client which privileges a particular known NIP 05 provider.