Whilst I agree on the glue records, DNSSEC is most definitely included as standard (check my domain itsg.host which is on a free account)

That I very much agree with, CloudFlare is great, but it certainly isn’t for every use case nor should it be. Thats kinda the entire point I was trying to make.

I did exactly this a few months ago on my NextCloud instance. Much sad ensued that evening.

I didn’t know most of these had specific names, and will almost certainly forget them the moment I close this post, but it’s cool to know them for 30 seconds

If you want a truly privacy respecting option (because self hosting), I’ve been using https://cactus.chat which is great. I specifically use it on my streaming setup as it’s real time as well to boot.