Otherwise, if an attacker can trick the registrar or nameserver That's a mighty big "if", though. For any of the TLDs I'm familiar with, there are significant

Otherwise, if an attacker can trick the registrar or nameserver That's a mighty big "if", though. For any of the TLDs I'm familiar with, there are significant protections against unintended domain transfers, and that has been the case for a long time for the major ones.