As ICANN prepares to open its next gTLD application window, dotBrands offer companies a rare chance to secure digital identity at the DNS root, shifting domain governance from reactive enforcement to structural prevention.