True, but they have been proactive in retrieving stolen domains. I know 123reg and others have been known tho not do anything.