So we have a fairly prominent client that portrays notes with inserted content as if signed by the original author's nsec.  Not great, but this is only the beginning.  There's nothing to stop clients from making much more material distortions.  Ultimately, the only solution may be to impose reputational costs on abusive clients.  Presumably, someday Nostr will have an app for that.