DNS is easy in the same way that chess is. The game mechanics are straightforward, and it gets more complex from there.

DNS bears the burden of delivering you to complex IT systems. It’s abused in various ways to enforce geographic restrictions, service levels, etc. It generally works, so long as everyone upstream knows how to configure things so that downstream things they don’t know exist work well.

When things don’t work… that’s not easy.