An attack surface is ISPs and Governments strongarming them to use their own DNS roots which can then be plugged into the "new" root servers conforming with the theoretical browser vendor, os vendor alliance.