Forgetting to renew a domain is much harder than it used to be [1]. ICANN rules require 2 reminders prior to expiration and 2 notifications after expiration.

Forgetting to renew a domain is much harder than it used to be [1]. ICANN rules require 2 reminders prior to expiration and 2 notifications after expiration. They also require a 30 day minimum RGP (redemption grace period) where DNS doesn't resolve and you can still recover your domain. If anything, I think having a domain tied to multiple services that break when the domain expires will help people notice so they can redeem within the grace period. Impersonation via an expired domain might be an issue, but that's already a problem we have to deal with and I don't see how it could get significantly worse, especially since services could put up warnings when domains move between accounts. 1. https://www.icann.org/resources/pages/errp-2013-02-28-en https://www.icann.org/resources/pages/errp-2013-02-28-en