If they made a truncated hash of the npub bytes, the first 33 can be represented by 3 words from the BIP39 word list. This would make impersonation a lot more difficult. It should show prominently on the profile underneath the user-configurable fields with a bright note saying "if this is not what you usually see this could be an impersonator".