Lots of trust, no verifying here.

Especially if you're on damus, the client that only trusts. Relays should periodically send invalid signature events back towards clients with the message:

"THE APP YOU ARE USING IS BROKEN, PLEASE INFORM THE DEV"

Might do this with blastr.