Correct, in that sense Pubky keys are a bit better than Nip5 for individuals, since even with DNSSEC, you don't get the same sovereignty.
Given how fast pubky is, it shouldnt be a big deal. It's all PKI. The only challenge is when keys change and rotate. But that's a whole other problem. What we gain today is huge already.