Regarding squatting usernames I personally would be fine with federations being like "if there's a username dispute we'll defer to the person who owns the corresponding keybase.io account" (or something along those lines; exceptions in cases of super plausible username dupes like "joe")