In general, Mastodon is old, pre-crypto, technology. IIUC the only signing they do is buried deep under the hood, and only for post authentication in a fairly limited way.

That's not to say nostr is better mind you. But it's no surprise that a lot of things suck about Mastodon for basically the same reasons they suck on Twitter.