It really does raise the question what other obvious (or not-so-obvious!) risks they ignored. How is "a foreign country can perform a DOS by using the DNS syst

It really does raise the question what other obvious (or not-so-obvious!) risks they ignored. How is "a foreign country can perform a DOS by using the DNS system as intended" not an obvious problem? Imagine if the service was called who.ru. What could possibly go wrong?