If they had a NIP5 at the guardian domain, it would verify the Guardian owned or sanctioned this account.
Yes, I agree. For that purpose, referencing the Nostr public key in any reputable place (such as their website or a well-known social media account) would also do.