> The due diligence missing is that the provider could have kept a record that the DNS records were owned by Alice. They should have been asking questions (or doing additional validation) when Bob tried to create new ones for example.com.
Isn’t that this covered by e.g. OVH that sends you at least a dozen of emails before your domain expires?
This is the DNS records expiring rather than the domain. On most providers DNS records are provided for free as part of having other services (eg a VM) so there is no incentive for the provider to nag you about your DNS records expiring. They are very likely to nag you about your VM expiring without mentioning the DNS records.
Isn’t that this covered by e.g. OVH that sends you at least a dozen of emails before your domain expires?