It’s not that difficult. Artists, original creators will write down their .eth or wallet address on their profile. Or just compare the timestamps of the creation of the smart contracts and the tokens.
If you ask “well, how do you know that’s their real deviant profile?”, at that point, it’s not a crypto/NFT problem, but an identity problem. My understanding is that keybase.io was one way to do that, but I never used it so I can’t say much. What if a scammer registered the keybase first before the real artist? Not sure what happens in that case.
What about keybase? Have people figured this out in a decentralized way?