It seems to have gone from a healthy and justified questioning, to a full on public witch hunt. Its bound to backfire for someone who goes too far and it becomes slanderous.
The number of unusual data points plus the lack of complete information (which is frequently the case with domain sales) is what drives the imagination to fill in those blanks, its just human nature. Especially when it seems to primarily be benefiting just 2 people, one who is unknown and one who has a known and checkered past.
So while I say its healthy to be skeptical, the only people who should really care are the ones who ARE heavily invested in .xyz, they're the ones potentially losing money, its their problem. It's like me and the crypto I had many years ago, after getting robbed twice, it was shame on me and I learned my lesson. At least it was just me dabbling. I no longer care because I am not invested. Ditto for XYZ.
The important thing now is that anyone continuing to invest in XYZ does so with eyes wide open. The questions are out there, you've been warned. It's risky. It may be legit. It may be a pump and dump or laundering op or something to that effect. As always, invest at your own risk.
If you're not invested in XYZ and you waste any more time on this, well, you're just wasting your time...