This needs a government / IEEE / domain registrar policy of some sort. Maybe it should simply be that all expired domains are put into stasis for 10 years.
If you want to buy it and have access to it sooner, then you need to run (and pay for) a program of works to catch and proactively kill all linked accounts, and build a register of embargoed existing email addresses that must be set to bounce.
I knew this was a problem, but wow, had no idea it was this bad…
Because I have a firstname.lastname@popularcloudemail.domain type email, I get SOOO many people signing up for accounts with my email, forgetting that theirs had some number suffix. I get peoples phone bills, pizza receipts, Amazon orders, parking meter e-receipts, Xbox live accounts, Dropbox logins, you name it.
I NEVER thought of what that would look like at a domain level!
My favourite was when my GP gave me a list of 10 docs to call to see who was taking referrals for adult diagnosis.
Yeah, that list sat unopenend (combination of overwhelmed and totally forgot) till 6 months later when I had to see the GP again, I panicked, and I called all 10 in the 30mins before my GP appt and then was late for the GP and almost missed my GP appt…
Fun times…