I disagree that it is worse than the X.509’s CA system which has had it’s fair share of controversies because of unreliable CA’s. That’s not something you would want to copy imo. But all in all this is valid critism for once, refreshing.
I don’t think making calls or in person verifications are practical as much. It’s a problem but I haven’t seen a good solution so far.