An attacker that controls routing can bypass the DNS entirely, so it's hard to see how protecting the DNS from that attacker serves any meaningful purpose.