>> Speaking with Vince (the administrator of the .ai zone) over WhatsApp, we confirmed that compromising this server would give us full control over any .ai domain:
>> Once administrative access is gained to the CoCCA application, it is possible to control the nameservers for every domain for that ccTLD.
The point is to control domains in a ccTLD. Arbitrary domain hijacking is bad...
Sure - taking the provider down is bad - but that happens due to unscheduled downtime every other day?