Dear colleagues,
SSAC has published a report to the domain transfer policy review PDP WG
It covers few risks, including authinfo code hijack and halt of DNSSEC service while dns service is discontinued.

https://www.icann.org/en/system/files/files/sac-119-en.pdf

-- andrei