We should frame it as "all .de domains are ready to be impersonated because everyone will disable DNSSEC".