[cferry]

> Is there even a legitimate use for a public TXT record for corporate devices?

Assuming there isn't and blocking them will break applications. I realized my local resolver validates DNSSEC when I went to a place that did not forward RRSIGs, making me unable to access the Internet over there.