Most founders treat their domain like a marketing asset when it should be locked down like banking access and production credentials.