Comment by zamadatix

Your other comment was [dead] before I could get to it for some odd reason so I'm going to reply here again since I know you're not a bot or anything :).

Perhaps the confusion comes from the context of the above being "what Quad9 says to do to your forwarder's DNSSEC configuration" and it'd be easier to ask this question with a fully fresh situation & context?