In a stub resolver like this, it’s setting a bit and checking a bit. Not worth arguing about threat models; just do it.