They do have such a limitation, because of things like UDRP. It's just that there are maybe some forms of restriction on the processes by which domain names can be involuntarily transferred or seized. But it's a real possibility!