Gotta say, I didn’t expect Keybase to do this after they announced their partnership back in 2018[0]
Automatically attesting keys with no user consent? Not good. This implies you are happy and willing to add arbitrary attestations to a users profile. For now you presumably have a rationale. But this is a can of worms I don’t think should have been opened.