DNSSEC not being used on some nextdns.io domains

api.nextdns.io and favicon.nextdns.io both use DNSSEC, however, the following domains do not:

my.nextdns.io

test.nextdns.io

ping.nextdns.io

router.nextdns.io

help.nextdns.io

…and the test.* domains.

All *.nextdns.io domains should use DNSSEC, especially

my.nextdns.io

If the lookup for the main control panel site isn’t using DNSSEC then what’s the point? Doesn’t this mean that someone connecting to my.nextdns.io could be spoofed to a malicious site that pretends to be my.nextdns.io? Or am I wrong?

Finally, almost every single time I enter the proper 2FA code when logging into my.nextdns.io, it fails 2-3 times before it finally works. This should never happen. Is anyone else experiencing this?