The ownership scheme in the name registry is as follows (from top to bottom):
1.
Top-level domains are created by the administrative multisig and then transferred to the TLD registrar contract.
2.
Second-level domains are in turn created by the TLD registrar on behalf of buying users and transferred to them upon creation. The users are then responsible for their management.
3.
Third-and-higher-level domain creation and management is completely in the hands of the users.
Administrative Multisig
A formally verified multisig contract with keys held by well-known community members is the owner of all Tezos Domains contracts. This allows for administrative actions like: