because, like everything, bad guys would abuse it, causing a list of "bad publicsuffix" to exist, which is basically the same thing.

Could we just publish (and cache!) TXT records at the appropriate-level domains? E.g.:

  host -t TXT github.io.
  etld_depth=2