That's why I culled all the news orgs from my feed that haven't self-verified by setting their account handles to their domain names: both to prevent that from happening, as well as incentivise news orgs to invest in this platform by putting in a minimal amount of effort to verify their accounts.

There was an account that was impersonating a Ukrainian org that somehow amassed several thousand followers and was included in Matthew's feed. As far as I understand, he deleted his account in protest of Bluesky's unwillingness to moderate the impersonating account beyond flagging it as such.