Agreed. But I meant that in the world without LE but with DNSSEC+DANE this wouldn't be an issue.