[dan15]

In a way they're lucky DNSSEC took it down, otherwise they may have not noticed the issue of using stale data for much longer.

[pornel]

They have expired the data correctly, which uncovered a bug in fetching of a new DNSSEC record.

If the DNSSEC didn't add new unnecessary complexity to an otherwise working system, there would be no bug, and no stale data.