From a business perspective I always made it a habit to get every popular TLD at very least .com .net .org and now probably .io for a given name within a reason

From a business perspective I always made it a habit to get every popular TLD at very least .com .net .org and now probably .io for a given name within a reasonable budget and then park the ones not being used to avoid squatters and other security and legal incidents. This is also a good time to set up SPF and MX records for all the domains especially the ones you do not plan to send email from. If getting newer TLD's be sure to investigate which ones are commonly used for fraud and spam and strategically apply mitigations accordingly. i.e. park the .xyz, .info, .me, etc... if you feel you really need those. Enable auto-renew on all domains and make sure your expiration emails go to a distribution list and not an individual. It can be challenging to find a .com that matches the name of the business especially if doing this after you already incorporated. I believe it is worth the effort to keep looking until you find a .com that aligns with the business name. In my opinion and experience this is especially critical if you ever plan to advertise on the radio or podcasts. For domain squatting, typos, variations, let your legal and security teams go after them. Your business should also consider using a registrar that looks for these things and can provide a detailed report written in a way that lawyers can easily understand.