Yea, sure that's the same critique I had for nip-70 (protected events) since the beginning, but from my perspective, the key here is that if an implementation doesn't follow the spec is a bad implementation, and then we can discuss about sibyl attacks, but that's a different conversation.