I think the protocol should be trustless. #Nostr does this. And @silverpill is building it on #ActivityPub