At that point, couldn't we use a distributed p2p-like nostr specific dns?

There would have to be some sort of trust mechanism, but dns is already an open concept. Each node could be it's own dns server.

If one node is comprimised, the others reject it.

We just need to figure out how to prevent the well from being poisoned.