ICANN is a natural monopoly because DNS was designed to have a single, central authority. Switching to a new DNS root without ICANN's cooperation would be a mon

ICANN is a natural monopoly because DNS was designed to have a single, central authority. Switching to a new DNS root without ICANN's cooperation would be a monumental task, and they know it. But setting up a new CA, while expensive and time consuming, is very doable. If Let's Encrypt somehow became as corrupt as ICANN, there'd be incentive for some organization to create an alternative.