@inventor I understand the concept of phishing attacks. I understand that they can even be performed against government workers.

This doesn't change the simple fact that admin.ch has been the official domain of the Swiss government for years and that social.admin.ch clearly is from the Swiss government, and that other governments following the same structure of social.well-known.domain is perfectly sensible.

At this point, I'm very confused about what you're even trying to argue, as the article doesn't have a single example mentioning subdomains (frankly, no details at all).

Phishing exists, therefore governments shouldn't be on the fediverse?
Phishing exists, therefore government accounts must be... what? Only from the main domain, because that's somehow safer?