[gorkish]

While what you say is completely true, unfortunately how I do my own security has very little to do with how my customers do their security. I see ccTLD and gTLD used in spearphishing and domain impersonation attacks on a frequent enough basis that I have form letters for the abuse reports. Start collecting some backscatter with a DMARC policy and you might be surprised at what you discover.