You don't actually need a non-profit TLD either.

Having a healthy competitive market for DNS services is good enough.

Really? If .com or .io or some other popular TLD starts acting maliciously, what’s the route to handling that problem?