Nostr web of trust is only as strong as its weakest link. It assumes people scrutinize every new follower they get, but a lot of people will see that “jack” (who is actually just a scam bot) followed them and just blindly follow back breaking the web of trust.