> ... so it isn't as good as DNSSEC for security.

And DNSSEC doesn't provide any privacy to the end user. Both mechanisms provide something of value, and ideally they'd both be used together.