But you can sign the nostr pubky and put it in you pkarr record. Two way link provides a fairly good claim.
Correct, in that sense Pubky keys are a bit better than Nip5 for individuals, since even with DNSSEC, you don't get the same sovereignty.
Given how fast pubky is, it shouldnt be a big deal. It's all PKI. The only challenge is when keys change and rotate. But that's a whole other problem. What we gain today is huge already.