When the US allowed commercial activity seems like they forgot to make a carve-out set of rules for non-profits. Are the .edu domain restrictions set by laws e

When the US allowed commercial activity seems like they forgot to make a carve-out set of rules for non-profits. Are the .edu domain restrictions set by laws established back then or by ICANN and can therefore theoretically be changed without any input by governments?