But surely then a maintainer notices what has happened, and resolves the problem?

That's really easy to clean up, if you maintain the tree of trust. If a parent node gets whacked, all the child nodes do, too.

Real world identity isn't sufficient or necessary to solve that problem.