DNSSEC only protects their records which includes the mapping of domain name to IP address (and vice versa), nothing else. But why bother when web browser don’

DNSSEC only protects their records which includes the mapping of domain name to IP address (and vice versa), nothing else. But why bother when web browser don’t even use DNSSEC itself? Because you can still send data securely under BGP hijack between your two endpoints with using DNSSEC-protected CAA record and a properly-CA-verified mutual TLS (mTLS).