Or is it that you googled and decided you can just take over someone's identity because they haven't registered a .com. It's not like "substack" would be a thing outside of it.
They haven't taken over an identity. A simple disclaimer on the landing page is sufficient to explain the situation, which is that no company is responsible for every current or past or future naming conflict. There's something something about naming being hard.