Registrars have rules set by Registries (For example, Verisign is the registry for .com, .net). I would assume these rules go back to the original issuers of the domains.
Regardless, I think that any registrar would have to have some "we reserve the right to shut down your domains" clause given the number of botnets and other uncool stuff on the net which use lots of domains (see http://en.wikipedia.org/wiki/Conficker#Payload_propagation for example)
Registries and ICANN do require registrars to include certain clauses in their contracts with end-users/registrants, but I'm not aware of any that include vague morality clauses. This document - http://www.opensrs.com/docs/contracts/exhibita.htm - is an enumeration of the terms and conditions that ICANN and the registries require us (Hover/Tucows) to include in our contract with our customers/registrants. These requirements aren't specific to us.
I was in the room in the late '90s when most of these clauses were negotiated and then again in the early '00's when the new registries came online (Afilias, Neulevel, etc.) and most of the new registries just simply absorbed the existing T&C's in order to smooth out the approval process associated with them launching their new TLDs. They've grown and evolved in the last ten years and aren't as uniform as they once were, but generally, you can still see the pattern in there.
Generally, most of the power a registrar requires to prevent the bad guys from doing bad things comes from national laws and not all these extra clauses. We (Hover/Tucows) find that all these extra conditions just make it harder for our customers to do business with us and so we've left out as much as we can and rely mostly on national laws to get what we need done.
Yes, thank you for your reasonable comment. I don't get why everyone gets all apocalyptic any time there's something even remotely "bad" sounding in any Internet company TOS. If we read the TOS of every site we ever visited we'd have an HN with nothing but submissions about how every website on the entire web is impinging on user rights. Let's focus less on all this minutia and get back to startups and code, please.
Regardless, I think that any registrar would have to have some "we reserve the right to shut down your domains" clause given the number of botnets and other uncool stuff on the net which use lots of domains (see http://en.wikipedia.org/wiki/Conficker#Payload_propagation for example)