To my understanding, there is no way to handle conflicts. If another person gets your private key, then they can collide their domain name with your domain name (and, speculatively, probably split traffic?)
It's not a real TLD.
It's a real TLD, see [1] and [2]. It's just not controlled by a central registrar like a traditional TLD.