Well now I’m nervous! My first instinct though is that the vast majority of Emacs packages are plain elisp, and Emacs users have a habit of cracking open and tinkering with their packages, so any malicious code ought to be spotted quickly.
With the native compiled modules however, it could be another story…

I’d say don’t risk it if you’re not based in the UK.
I have a .uk domain and had to provide proof of residence or something to nominet. I can’t remember the exact process now, but they did temporarily suspend my domain (without warning) until I contacted them.