The biggest problem it removes is the split between the registrar, the DNS host, and the certificate issuer. Before, a client’s domain lived in a registrar panel with no usable API, DNS lived somewhere else, and cert renewal was a third thing to remember. Now registration, zone records, Let’s Encrypt certificates, email forwards, and domain renewal are all objects in the same account and the same REST API, and all of them can be managed from one Terraform state file. The benefit is that “add a subdomain for a client” is a config change, not a login-and-click session, and renewal dates aren’t scattered across four vendors. The second problem is the apex. You can’t put a CNAME at a zone root RFC 1034 and RFC 2181 forbid it, because the apex also has to carry SOA and NS records. Every time I pointed a client’s bare domain at a host that doesn’t give out static IPs, I was either hardcoding an A record that would silently break when the provider rotated addresses, or moving the whole zone to a provider with proprietary flattening. DNSimple’s ALIAS record handles it server-side: their nameservers resolve the target and answer with plain A/AAAA records, so the apex stays clean and I’m not maintaining a cron job that polls an IP. The third problem is that automation is dangerous when you can only test it against production. Their sandbox gives me a separate API host and UI with the same API surface, so a script that creates sixty records across a dozen zones gets shaken out there first. That single feature changed how willing I am to script bulk changes at all before, anything beyond a one-line record edit was a manual job precisely because a typo had real consequences. The benefit in one line: domains stopped being a recurring manual chore across a client portfolio and became infrastructure I can version, review, and re-run. Review collected by and hosted on G2.com.