Comment by lukasfo

I strongly disagree, this is 100% vulnerability, you're leaking private DNS records - aka if the name server is also used for private records these are effectively exposed.

There's NO REASON to have zone transfer enabled.