I believe you have to sign an agreement to not use the domain names list for DDoS attacks, specifically against WHOIS services. Not saying that this stops anyone, but that's what they probably had in mind.