see this is why I own like 30 domains and do not get rid of them ;)

The excuse that, somewhere there is a hacker group, who has a list of all social media accounts from various leaks aggregated, realises that my domain expires and executes automatic hacking attempts against my accounts, is now my new favourite bedtime story to scare kids ;)

But really what would the alternative be? Sell them only to people "I trust"? That can't be healthy.

I guess the only right thing to do here is to extend your domain, host a page which clearly states "this page will be unavailable in the future" and when google traffic has dropped to 0, lets say a year later you can set it free?

as for account claiming with expired domains: there are so many reason why that account should have a new email by then or be closed entirely.