Bluesky's apps have the verification, but everything else using the protocol can just not implement it.