Yup, this is why NIP-05 is actually very important. Especially, for high-profile people and/or businesses. If you can assign a verifiable to domain to them, then you know it's the real one. Nostur app's "possible imposter" feature is great too.