The random nameservers are only accidentally a defense against this attack. They're avoiding SPOFs, including TLDs -- you never receive nameservers in the same TLD for example. It's a reliability and scaling consideration with this accidental benefit.
Most admins don't think about a complete TLD failure. Amazon did.
Most admins don't think about a complete TLD failure. Amazon did.