You can outsource all the infrastructure to a real registry. (Like how the "non-profit" PIR outsources all operations to Afilias.)

I agree that trying to buy a TLD specifically for the purpose of domain squatting is very risky. But in case anyone wants to try it, may I suggest .con?