Cody on Nostr: The client checks that the seal event’s author matches the author claimed in the ...

The client checks that the seal event’s author matches the author claimed in the rumor it wraps, so the attack you describe wouldn’t work. Anyone who knows your pubkey can fabricate a rumor event claiming to be from you, with any content they like. But they can’t produce a valid seal for it that other clients would accept.