I think the panic is a bit overblown (and a bit late-where was
everyone’s concern in July?). If you read the actual policy it
makes a couple of things clear:
- This policy is for registrar transfers, not ownership transfers.
It doesn’t make it any easier for a domain to be hijacked, except
perhaps by a corrupt registrar.
- The gaining registrar is still required to confirm the transfer: A
transfer must not be allowed to proceed if no confirmation is
received by the Gaining Registrar.