What are your thoughts on a CA issuing a wildcard certificate for: *.com.removed-limits.com Blocking the string "paypal" would prevent issuance for phishing

What are your thoughts on a CA issuing a wildcard certificate for: *.com.removed-limits.com Blocking the string "paypal" would prevent issuance for phishing sites for maybe a day. After that, they'd have all migrated to "payypal" or "paypel", which would still be more than sufficient. And if that stops working too, well, good luck with wildcards! Not to mention that in an HTTPS-only world, CAs would have full control over which domains are permitted on the web. Is introducing a semi-centralized content police really a good trade-off just to prevent phishing, or shouldn't we look into how we can prevent phishing using other means (U2F, webauthn) and focus on moving to negative-only security indicators (where HTTPS becomes the default, with no security indicator)?