I think this document is ready with clarification on DNS transport and security options in Section 3.1.
Yet I still suggest adding RFC1035 as normative reference to the term 'DNS' in this document to differentiate from stateful DNS (rfc8490) which is not about transport and security options but a totally different DNS operation model.