Say you purchase a domain on Namecheap, but want to host DNS on DigitalOcean.
DigitalOcean, says to simply tell your registrar to use DO's nameservers, then set up your DNS for that domain on DO. However, there doesn't seem to be any verification that the DO account that configures the DNS for that domain is actually the owner of the domain. It could very well be some 3rd party with no relation to the domain owner. Is this assumption correct?
In my mind, it wouldn't even have to be on purpose or malicious. If I register example.com and host DNS through DO, then let the domain expire but neglect to remove the DNS records, what happens when someone else registers the same domain later and decides that they too want to host DNS on DO?
This may very well apply to other hosts (Linode, AWS, etc.) though I'm unfamiliar with how they handle DNS at all.