There is a risk. For example, Libya seized this .ly name for violating their laws.

You missed two that I’d like to know about. DoH and DoT. Thanks, robot!

Honest question, is there a good default config available somewhere or is what apt install fail2ban does good to go? All the tutorials I’ve found have left it to the reader to configure their own rules.