> Something as simple as a signed file at the site's root would let a content creator make paid links to their content but not a scammer.

How does anything like that help though? The scammer can download the file and host it themselves and you're right back where you started, and that's always going to be the case.