Stalwart's resolver is doing its own DNSSEC validation that no resolver choice disables, and it's wrongly flagging the (legitimate, unsigned) NODATA AAAA as bogus

Issues
3

Also reported in Not able to send emails to certain domains due to DNSSEC error and noted that 0.16.9 does not have the issue while 0.16.10 does.