Two letter TLDs are reserved for countries. No gTLDs use a two letter TLD.
According to the rules set by the org that controls the fate of IO. They can easily change the rules if they wanted. There is a vested interest in not losing IO, and nothing but their own rule to stop them. Who’s to tell them they can’t do whatever they want in this matter?
Community rule is 30 days.