It's a completely different attack scenario. DANE isn't going to be of any value when an attacker is sitting between the end user and their ISP - which was alr

It's a completely different attack scenario. DANE isn't going to be of any value when an attacker is sitting between the end user and their ISP - which was already the requirement for compromising the TLS connection in the first place - as they could just strip DNSSEC and fake the DANE records.