I might be mistaken but I don't think >99% of people who have bought an NFT have verified that the key used to generate the token does in fact belong to the artist that created the piece that's (currently) behind the link that's in the token.
They don't have to, generally speaking. OpenSea does that for them, and issues a blue checkmark to items belonging to the collection of the verified key.
