They added DNSSEC because of FedGov accounts that require it.

Happy to see security audits doing good work.