DNS without DNSSec (DNS Security Extensions) is not secure. It's that simple.
As an example, a recent interview with a successful black-hat hacker included the following quote: "They patch SQL but choose a DNS that is vulnerable to DNS cache poisoning. You can break in and be gone within an hour." DNSSec prevents not just DNS cache poisoning, but a host of other DNS hacking attacks.

The link for this article located at InfoWorld is no longer available.