Just buy the domain you like.

#1 is a good problem to have and unfortunately extremely unlikely. But if you do become a brand name, you should have enough money to easily purchase other TLDs.

#2 can be mitigated by filing for a copyright. US servers and Google will shutdown and blacklist phishing sites violating your brand name and copyrights.

Good luck!