Reclaiming a domain from a registrar that has "gone bad" actually sounds pretty difficult. If they were so inclined, they could refuse to give you the transfer code, and they could renew it so it doesn't expire.