They might be able to afford the application process, but would they be able to handle the infrastructure required to administer the TLDs they buy? Seems like a costly and time consuming proposition for squatters.
I agree that trying to buy a TLD specifically for the purpose of domain squatting is very risky. But in case anyone wants to try it, may I suggest .con?