As far as a takeover, it could happen right now just by the wrong people worming their way into positions of power. So the admins already must be ready to deal with a takeover.

I don't agree that user created .wins would make that worse. They don't need a .win to organize and plan attacks, they can just use discord for that. It could cause some other problems, though, so I'd be fine if there was some kind of test or investigation for every attempted .win creation - preferably something handled manually by the admins and the details not being publicly disclosed so it would be very hard to cheat (if it were something dumb like post karma, that's really easy to pump with bots).