Big solution based on faults with an insecure operating system

I just don't seem to understand why this is needed at all.  IIRC, the DNS servers used for
resolving are set either by the user or the DHCP server.  Given that most people enter their
ISP's DNS servers, how are they using rogue DNS servers?  Let's assume that there aren't any
rogue DHCP servers on their networks.

The article states that viri are doing drive by reconfiguration of DNS servers on some
operating systems.  Shouldn't that be the focus and not adding more layers onto a working
system?  As one person notes, couldn't network admins force their users to use the local DNS
servers?  I'm already forced to use the network's SMTP server.