So, from a "business/brand-awareness" perspective, does still the dot com TLD make a big difference compared to other less-attractive TLDs? I think this should have a different answer for website-based businesses and mobile-app-based (where most apps may ONLY need a domain name for consuming APIs?), PWA is another case in the middle?
Let's take for example some famous/successful services which are not .COMed, eg; "zoom.us", "notion.so", "telegram.org"..etc, Do you think people still notice or care about these services not being ".com" (although the first two already own their .com TLD).
What are good alternatives: ".io",".ai" for techy startups, ".app" for mobile apps & PWA? What about so-called "domain hacks" where you can read the full name of your brand when adding the appropriate TLD, eg: "youtu.be", "instagr.am", "every.one", "del.icio.us".
It can be challenging to find a .com that matches the name of the business especially if doing this after you already incorporated. I believe it is worth the effort to keep looking until you find a .com that aligns with the business name. In my opinion and experience this is especially critical if you ever plan to advertise on the radio or podcasts.
For domain squatting, typos, variations, let your legal and security teams go after them. Your business should also consider using a registrar that looks for these things and can provide a detailed report written in a way that lawyers can easily understand.
If you have the budget, buy the best you can. Lots for sale from 'domainers' and a few grand can buy really nice domains.
Don't skimp on your long term online identity !