I'm still just not convinced that people still don't understand that the keywords are literally the entire wallet.
Like, that's the whole point. Why would you ever give that up?
Messaging new contacts should have a TOFU (Trust on First Use) check just like Zapstore has, using web of trust, NIP-05, and other trust signals.
Of course that can only be built on nostr.