Vendors changing PGP after verification is a red flag
A vendor shows up, gets "verified" on a key, builds trust, then quietly updates their PGP. If buyers don't catch the change, they place orders pinned to a key the original owner may no longer control.
We now lock vendor PGP at registration: same key they entered with, forever, unless staff intervenes. Markets that let vendors rotate PGP freely are letting account takeover and selective scamming stay easy.
Verify the key, then keep it verified.
It is a red flag and it's good whatever service you're low-key advertising for does not support silent updates for PGP keys anymore.
they could of lost their secret key ¯\_(ツ)_/¯ nice to see though the effort some people may not see