Good to know, thanks! I did once have a domain where DNSSEC was misconfigured and it broke the site for certain types of queries, e.g. example.com would resolve on my ATT router but not on my LTE. And I had no idea why, but I ran a dns checker against it and it said misconfigured DNSSEC. Why don't browsers tell you when (DNSSEC misconfigured) happens?

( Honestly I still don't know why I wanted DNSSEC, but since dnsimple / google domains suggested it in their UX, I figured I should do it. )