Comment by unilynx

> but it is not the operational hazard it’s made out to be

Until you flip that DNSSEC toggle