They proclaim themselves sui generis authority in charge of domain names, domain registries and domain name regsitrars on the internet (there is not and never was any legal basis for such "authority"), they turn domain names into a "business", they make up arbitrary rules that line their own pockets (initial gTLD application will cost $185,000), they allow registrars to do things like front-running, etc., etc.
Why things do not change: When a user gets screwed by front-running, the user calls for a boycott of GoDaddy instead of questioning the entire ICANN-administered system itself. The protection of ICANN's racket relies on security through obscurity.
Front-running is a very old practice amongst ICANN-approved domain name registrars.