The fundamental flaw is that domains don't unambiguously confirm identity; they only confirm that the user controls a domain. You still have to do your own checks to establish if the domain actually belongs to the person it's claimed it belongs to. A blue check categorically means "this is them".

Also most people don’t own domains and of those who do only a small percentage know how to change their DNS records. Most are using services that handle those things for them.