Authoritative DNS server is very easy to run. (I use knot) I run several just because it's so easy. I don't use DNSSSEC though, because I haven't found a use case for it.
Especially since you can run hidden root or whatever it’s called and have the NS servers actually be secondaries for the main servers they replicate (and maybe not even be on for more than some transfers).
