Malware could still use DNS records for storage and access to bootstrapped payloads correct?

Yes, but it's not a problem, any more than downloading any arbitrary text is. You'd still have to have something execute the binary.

[dead]