If the legal team came up with this idea, they need a new legal team. In house lawyers do not have to be technical experts, but they should know about cyber-squatting and DNS related fraud. This should have been in their wheelhouse.
Some of the best infosec people I know have completely irrelevant degrees.
That said, I'm not trying to make excuses for Equifax. From what we know the head of infosec there was not qualified to do the job.