Not really related other than being a different mess, but I've been running with DNSSEC enabled for a few months and it seems developer.apple.com is one of the few that fail DNSSEC validation (due to two different issues :/) and has been for a while (maybe always):

https://dnsviz.net/d/developer.apple.com/dnssec/

My favorite DNSSEC issue is that Verisign's DNSSEC checker fails DNSSEC:

https://dnsviz.net/d/dnssec-analyzer.verisignlabs.com/dnssec...

At least there is an easy solution to this mess, just remove it entirely. It is obvious that almost no one uses it.