DANE does not even work without DNSSEC, it's a pre-requisite. The root nameservers should be distributed, anyone can run it. Kinda like bitcoin nodes