I mean you're technically not wrong, but how do you confirm ownership of an identity?

At some point you have to "trust a system". Block Chain, Social Security ID, Drivers License, Passport, even DNS are all susceptible to some form of attack vector.

I could do a DNA test to verify you, provided I did one before.

> is only as "secure" as DNS, which isn't very

I'd argue DNS itself is quite secure. It has lots of issues, but it's so widely used those issues are known and mitigated for. DNS as a system receives an insane amount of attacks. There's just too much money involved for people not to pay attention for attackers and defenders.

I will agree that your DNS isn't secure. It's analogous to saying your Gmail isn't secure, but Gmail itself is just fine.