So, are artists suddenly getting in on pgp key-signing parties to establish a web of trust, or is the public key of the artist really just a key claiming to be that of the artist? What is to stop me from buying "bank.se", "banksy.me" and "banksy.io," and actioning off three different NFTs (of three different digital representations of the same street art) to different online art communities? What is to stop someone who MITM's the artist's webpage from selling NFTs on their behalf?