This is why you need to take DNS seriously. It's a single point of failure. It's often overlooked, but losing administrative access to a (former) domain name is really, really bad. It's not just email, the hacker can also buy certificates, hijack or transfers the domain (if domain is not locked) and more.

Related: https://news.ycombinator.com/item?id=17704828