@me agreed. I'm disappointed that they've only put one on the list in the end. I think this should be data driven and not language driven. It seems like their argument for not including the full list of candidates was because they could be misinterpreted in different ways. That to me is not the issue. To me the issue is that people use tlds and domains that they do not control and they leak data on the internet. To the root servers and anyone else watching. Adding special case for internal will help but it doesn't solve the problem.