But make it too easy, you wind up with CNAMEs to external domains, that expire, get bought and now you have scams running on your .edu.

You just don't have the same ability to do top-down management and requirements that you do with the private sector. Individual researchers will get grants and really drive how things need to get done because they're the ones bringing money in.