Then for that oddball one-off system, there's a kernel compilation flag that is impossible to find in obfuscated C and assembler that you can set named UNSAF

Then for that oddball one-off system, there's a kernel compilation flag that is impossible to find in obfuscated C and assembler that you can set named UNSAFE_ALLOW_REMOTE_DNS_RECORDS_DRAGONS = true where the default setting is always FALSE. Can someone who does kernel or DNS client development in operating systems comment? Am I nuts or is DNS nuts?