Auto-renew depends on the credit card still being valid, as far as I know. Maybe it can be tied directly to a bank account, but people can switch banks and forget about it. The internet needs a better system for domain names. Squatters have taken tons of them, and even major ones can still be lost accidentally. If a major registrar gets hacked, it would cause a lot of problems for at least a few days.