There is always a risk, doesn't mean it apply to every domain. I don't think itโs wise telling him to get a refund just like that. Do you honestly believe Apple would search and destroy everything containing the word iPhone? Of course they would if someone is using the name in such a way that hurts their brand, but otherwise?
It wouldn't be very smart shutting down resellers, fan sites, blogs etc about iphone just because they would happen to have a domain like that. That would REALLY make them look bad, Apple is smarter than that.
Regarding your link above to the Legal Issues and Disputes, I found
this as an example.
Which also mentions PaypalSucks.com, which is interesting because they won a dispute with Paypal regarding their domain, and could continue without problems (due to Free Speech). Maybe you could enlighten me by pointing directly to a thread or UDRP where Apple actually managed to acquire an iPhone domain, I can't seem to find anything when searching.
You can
query google for domains with iPhone in the URL and you will find lots of established sites with iPhone domains, i.e.
iphonehacks.com (PR5), been around since 2006. Also notice how this keyword is used for Adwords on Google.
It's what you do with the domain that matters. Don't get me wrong, I'm not very fond of domainsquatters, but this domain-trademark-hysteria are beginning to go too far.
And no, I'm not new to domaining.