For self-custodial setups the recipient could also create one of these events - and as you say clients could choose whether to trust it based on their pubkey.