I may be being dense here but one of the concerns with this that just came to mind is that (for creators more than brands) catfishes might start swiping up any relevant domain names and using redirects to appear legit

Absolutely this is a problem. Its in the same vein of problem as people getting usernames close to famous peoples on twitter, buying a bluecheck, and impersonating them.