That's how you maintain backwards compatibility while improving security. I'm not sure lamenting the imperfection is valuable, but it is a worthwhile lesson for those designing new protocols.
If it becomes popular enough you will certainly face future security challenges you failed to even imagine. Leave some room for that.
Otherwise, this is great work.
Longer domain names are more secure!
And conversely, short domains like Google’s own g.co are less secure!