If you control the domain it's not a bad verification check. Can be removed if nsec is compromised. The way most people use it though, yeah.