I'm on your side, really. It's only my cynicism that puts me on the 'fuck it, if we're going to have DNSSEC let us at least leverage it well' side of the fence. That's exactly the same attitude as HPKP and HSTS in HTTP: 'Well HTTP sucks, let's see what we can do'.