One of the nice things about DNSSEC is that it is both optional and it actually works. It being optional means that everybody who doesn't like DNSSEC can just

One of the nice things about DNSSEC is that it is both optional and it actually works. It being optional means that everybody who doesn't like DNSSEC can just ignore it. Just don't sign your zones, don't run a validating resolver. DNSSEC doesn't get in the way. At the same time, because Google's public resolvers have been validating DNSSEC for quite a long time, it is safe to run a validating resolver. Anybody who signs a zone is forced to do it correctly, otherwise the zone will be unreachable for a significant fraction of the people on the the internet.