When in doubt, use .org for infra domains, always.
Ah, yea, okay, .xyz gets used by spammers a *ton* so I think they did this to fix their spam problem (lots of people just block *.xyz these days), but what a terrible idea…
Noted. I never thought about TLDs being owned by a bad registrar