Messaging new contacts should have a TOFU (Trust on First Use) check just like Zapstore has, using web of trust, NIP-05, and other trust signals.

Of course that can only be built on nostr.

nostr:nevent1qqs0kuhth7tgetgcycpaex5xzd2tkaq88kf8tql2hff8wewq02mt2vqpz9mhxue69uhkummnw3ezumrpdejz7q3qaeh2zw4elewy5682lxc6xnlqzjnxksq303gwu2npfaxd49vmde6qxpqqqqqqz2urzqt