> You have confused discretionary revocation with misissuance.

Ok, then please enlighten me. What is misissuance in DANE?

Because if misissuance in DANE is your TLD hijacking your domain... how does insecure DNS + WebPKI prevent that kind of attack?