That was my point. How do you know the pub key is not tampered with? Come to think of it, is meeting in person the only reliable way to reliably exchange keys?
When using PGP, you have to decide how much you trust each key. All that PGP does is enforce your trust preferences.