I wish I saw any basis for 1, 2, or 4. Unless by "eliminate squatting" you mean "eliminate TLD squatting", which would make 2 as irrelevant as 3. In particular

I wish I saw any basis for 1, 2, or 4. Unless by "eliminate squatting" you mean "eliminate TLD squatting", which would make 2 as irrelevant as 3. In particular, "real-looking domains" have never been a required detail of phishing attacks, which only have to look plausible on the right side to do damage. A profusion of TLDs only serves to degrade what "real-looking" means to non-nerds.