I think what it means is that if we're going to deploy DNSSEC, we might as well give up this fruitless war on "open resolvers*" and focus our energies on other

I think what it means is that if we're going to deploy DNSSEC, we might as well give up this fruitless war on "open resolvers*" and focus our energies on other solutions. Substitute 'routers' for 'resolvers' to see how this only plays into the hands of those who don't like the openness of the internet.