Looks like a lot of clients and relays aren't validating signatures. My note import tool has found hundreds of notes served by relays with invalid signatures...