I like domain handles and think they are a good idea, but they are not a complete solution for verification. There can be similar domains (also homograph attacks en.wikipedia.org/wiki/IDN_hom...), and there is nothing that makes "officialperson.bsky.social" less "verified."