If someone can tamper with your DNS TXT records now they can get a certificate for your domain.
Not tamper with the record directly, but MitM it on the way to a target.
Not tamper with the record directly, but MitM it on the way to a target.