Quite wonder what would happen if someone would generate OpenPGP keys and purposefully published it, including the private key.
Because most of OpenPGP usage is pretty much "Look, it's signed, therefore it's good".

(Also the email isn't validated at all, that's a thing you're supposed to do)