Malware has been putting updates and command and control instructions inside DNS records for a while now, so they get the benefits you mention as well as contin

Malware has been putting updates and command and control instructions inside DNS records for a while now, so they get the benefits you mention as well as continued availability even when the original authoritative servers are taken down.