Comment by marcosdumay

You can even avoid domain enumeration by doing online signing with DNSSEC. It's just that people still prefer the offline option.