This is subtlety riskier for people whom don't fully grasp WoT model or whom blindly trust an external source, ie keybase, without in-person key id validation.

This is subtlety riskier for people whom don't fully grasp WoT model or whom blindly trust an external source, ie keybase, without in-person key id validation. GPG/GNU/FOSS and tech meetups need to vigilantly promote GPG key-signing/sharing events more and underscore its importance. PS: I wish GPG had better marketing / public multicast/broadcast communication.