Sure, in fact NIP-05 was recently updated to highlight also this edge case:
https://github.com/nostr-protocol/nips/blob/master/05.md#identification-not-verification