This. That’s why I build #nauth to do secure document transmittals. With #nostr, you get authentication using npubs for free; the first two steps just need to be regularized in a protocol, not implementing your own auth scheme.