> 4. The root zone's key changes fairly infrequently (once in a decade), so IoT devices can use it to bootstrap themselves.

This is not true, nor will it be true into the future.