The downside of using hosted NIP-05 verification services like nostrverified and nostr-check is that they dump literally all their users in nostr.json - not great not terrible. Self host your own nostr.json, it's really not that hard.