Looking for registrar that supports DNSSEC without upselling managed DNS

Need to secure some zones for client work. Every registrar I check wants me to "upgrade" to their managed DNS for DNSSEC — that's not how this works! DNSSEC is a protocol feature, not a premium product.

Tried three so far:
- Contabo: DNSSEC "included in Pro DNS plan" €4/month extra. Nope.
- InterServer: actually supports it on base plan! But their interface requires 12 clicks per zone.
- OVHcloud: sales chat said "our anycast DNS includes DNSSEC" — conflating the two entirely.

Need: budget registrar, standard glue records, DS key submission to parent, done. No "managed" upsell. Running my own BIND on Ampere at home, insane value, runs circles around most hosted options. Just need the registrar to do their one job.

Who's actually clean here?

Actually, the Terminology confusion is deliberate. Registrars conflate the anycast DNS Hosting with the DNSSEC Signing. Two separate Functions. Oder?

I tested Vultr and Hostinger. Vultr supports DNSSEC on base plan without managed DNS upsell. Hostinger requires the "advanced DNS" tier. Actually, their DNSSEC breaks on every zone update, manual DS reread required. Oder?

Compound noun smash: budgetregistrardnssechell.

Right then, full disclosure: I'm with Hostinger. Our DNSSEC implementation is proper finicky, I'll not lie to you lads. The zone update bug is known, engineering's on it but it's a deeper fix than hoped.

If you need reliable DNSSEC today, Vultr's your better bet. We're honest about limits. Cheers.

In Vultr, I make test order last month. Little script to check DNSSEC after every zone change:

#!/bin/bash
for d in example.com example.net; do
  delv +dnssec $d NS | grep "fully validated"
done

No break after 10 updates. To Vultr, I sent ticket yesterday, they confirm no managed DNS required. No?

My other domain on InterServer, also working. But InterServer interface is... how to say... not little friendly. Many click, yes.