Aws.com and google.com don't have DNSSEC enabled (gist.github.com)

They never have. Fewer than 5% of North American domains are signed, and over some of the last few years, the number has gone down.

https://dnssecmenot.fly.dev/

Almost nobody has DNSSEC enabled.

Against DNSSEC: https://sockpuppet.org/blog/2015/01/15/against-dnssec/

DNSSEC is a failure IMO. Failure to be adopted, failure to be be required. Next.