Comment by tptacek

Yes, that's my understanding as well. You'll notice my top-level comment from a few hours ago says that as well.

(You edited your comment to include more detail about when LE started validating DNSSEC; all I know is that it's been many years that they've been doing it.)