[carlosdp]

XSS attacks aren't the only thing to be worried about. As noted above, you could buy subdomain like "support.micro.blog" and trivially phish people's micro.blog credentials, for example.