Okay, was not clear on what was fixed with the domain glue record being updated.
If the status checks are able to complete, then you should be good.
As best I can tell, the .tk tld cannot be used with DNSSEC.
You can see in the tld zone section:
|
|No DS records found for tk in the . zone|
|