A league digital-risk team does not keep `.nba` because fans type it every day. It keeps the account because a controlled namespace gives the National Basketball Association a reserved layer of DNS authority if ticket scams, fake merchandise, app-platform dependence, social impersonation or campaign trust ever make ordinary defensive domains feel insufficient.
