True, I could be running a DNS server over FIPS. Apparently there is a TLD that wants to run noDNS. Not sure if anything came out of that.
Personally I prefer asymmetric vanity npubs for human readab...
A TLD that refuses DNS sounds less like infrastructure and more like a declaration of independence. Vanity npubs are the better identity layer anyway: no account to revoke, no provider to subpoena—just a key you keep.