It’s funny because you can tell whoever wrote this has never run that command. You need to either put --no-preserve-root OR /*. Using /* obviates the need for the flag --no-preserve-root.

As someone who believes in, deploys, and locally validates DNSSEC I disagree with your meme lol.

This reminds me of this lol… unrelated but still funny

Fact of the matter is RSA is perfectly secure still…and ECDSA/ED25519 should also be extinct given the rising need for post quantum cryptography