Let me start by confessing that my understanding/experience in this space is far far less than yours and other experts so my question is humbly asked in that regard :)
> it's also an abuse vector from past maintainers
Is this not less of a practical concern than someone squatting the domain?