> When I’m talking about identity I’m speaking strictly of the keys that sign your messages and the pub key derived from it.

Me too.

> I challenge you to prove the opposite.

https://web.plc.directory/spec/v0.1/did-plc

Where are your rotation and signing keys stored? Who can access them? Talking here about the majority case.