I think it can be done somewhat easily as a PoC. First iteration could be as easy as some relay operators also running their own DNS server like Bind or Unbound. Could in the future do interesting things with nsec used to create DNSSEC. But can be something aside from a NIP.