Others have mentioned that GoDaddy will park domains that users have searched for or added to cart.

Does this cost them money to do? Or do they get to buy domains at near zero cost by virtue of being a registrar?

I wonder if it's possible to penalize them for this behavior with bots to perform searches of useless word permutations and adding them to the cart at scale. It would probably be too easy to identify and filter the traffic, but just musing out loud.