But the authoritative root server set is maintained by ICANN, so they have ultimate control (for now) and can essentially dictate terms for all TLDs.

I wonder whether we wventually see some other power establish their own root servers which mirror only the parts of ICANNs DNS that are politically convenient to whoever does this.