This sounds like an avenue for miscreants to potentially hold domains hostage. :(

eg: Register likely target business domains for G Suite, O365, etc trials to lock them out.

Then blackmail/bribe/whatever the legit owner if they want access.

Doesn't sound like there'd be any workaround either, at least for the first few years. :(

Maybe the "Police contacting Google/MS" which would eventually happen could get it stopped at some point.