Bootstrapping without DNS or bootstrap nodes is possible, if hard, but still leaves some open questions.

Not everything in the world can be poisoned if you design carefully enough, but IPFS isn't a design I'd pick for building the foundation of an internet.