It's not my job to prove or disprove anything about pubky or to try and fix it.
But I know that you can publish messages to nostr using nothing more than a photograph of text with a timestamp, presumed identity, and signature block, because I actually did that