>> I offer to set up a subdomain for you which delegates all requests (see above) to your fake nameserver.

Isn't that just like publishing-to-all-hackers your "not so secure" server?