ccTLD hacks are both semantically incorrect and geopolitically unstable.
The .io TLD will likely be phased out in the future due to geopolitics, and all the companies who decided it was more important to signal how hacker jargon aware their startup was will have to go through the very difficult process of changing domains.
In order to log into IRS.gov to get a code to pay my USA taxes, I had to verify my USA ID via a private company called ID.me, whose domain name AND company name are now forever tied to the whims of the government of Montenegro.
The biggest difference is the role of ICANN and their willingness to regulate the management of a TLD. With ccTLD they have an official policy to be hands off and not dictate what a country will do with their top level domain. If the US government would start to mess with Verisign and how the registry handles domain, then ICANN is within their own policy to just move it somewhere else.
The government of Montenegro could, just like many other ccTLD, decide tomorrow that every registrant must be a citizen of Montenegro. Many countries do this today, and it is no big deal because it is the country of and ccTLD that dictate how their domains should be operated. They can raise prices by a factor of 100 if they wanted, decide on some form of ID for registration, or dictate that you must have a company located in the country. ICANN has no objection to any of that.
ICANN is a nonprofit in California. It doesn’t really have any power on its own. It only exists because everyone from browser developers to server operators to consumers agrees we need a central place to organize stuff.
If the US justice system issued a warrant telling Verisign to do X, what do you think the courts would do to ICANN if they tried to actively stop X from happening? At best, they would be politely asked to stop, at worst, they would get felony charges for obstruction.
It's very different. If the USA soon starts cancelling politically inconvenient domains, European ones will be safe. Just like Nazi propaganda domains would be censored in Europe, but are safe in the US.
Every domain has a country. It's as if every non-ccTLD was actually underneath .us. For legacy reasons .com .org etc were grandfathered in. gTLDs are also under .us for corrupt reasons.
Politically inconvenient domains are already routinely seized by the US and there are international agreements in place that allow cross-border takedowns.
Why do you think t.me got taken down? Montenegro doesn’t care about Telegram.
The .io TLD will likely be phased out in the future due to geopolitics, and all the companies who decided it was more important to signal how hacker jargon aware their startup was will have to go through the very difficult process of changing domains.
In order to log into IRS.gov to get a code to pay my USA taxes, I had to verify my USA ID via a private company called ID.me, whose domain name AND company name are now forever tied to the whims of the government of Montenegro.