It’s the cost of freedom. That’s part of why I think a NIP-05 is bad actually, it just encourages impersonation and bad behavior at scale. If someone is pasting your public key they can’t go wrong. But any kind of human readable username means you either have censorship or impersonation. Well, unless you have a blockchain involved like Namecoin.