How? Specifically: say I want to buy foo.com who am I buying that off? if the only restriction is that no one else owns it then there seems to be close to zero

How? Specifically: say I want to buy foo.com who am I buying that off? if the only restriction is that no one else owns it then there seems to be close to zero cost for anyone just mass creating every domain.