DKIM and other DNS records for additional (multiple) domains

3

So if I understand correctly the MIAB machine also effectively becomes the DNS server for that particular domain (with all the risks involved).