“[…] it's what the security team at one of the few large tech companies that actually have [DNSSEC] enabled told me when I asked why the hell they had it enabled.”
First, you're the one who brought up this stupid article claiming that I'm singlehandedly responsible for the failure of DNSSEC. Not me. Next time, don't cite it!
Second, you have a funny definition of "thoroughly answered". People have written posts disagreeing with it. Their arguments are not persuasive. Clearly, for the last decade or so, my arguments have been carrying the day. You can't just write a rebuttal and declare the debate over!
DNSSEC proponents are weird about this stuff. Someone else took me to task for not point-by-point including their rebuttal article in my original post, like that's a reasonable demand to make.