I would say that the user should be forced to install the correct GPG key, however in this case I imagine the attacker would just put up their own key on a "fak

I would say that the user should be forced to install the correct GPG key, however in this case I imagine the attacker would just put up their own key on a "fake" website on the compromised domain and people would then install that. Or just ignore the warning.