That's already the case with dns-01 verification, no? Besides, if someone has access to your TXT records then chances are they can also change A records, and y

That's already the case with dns-01 verification, no? Besides, if someone has access to your TXT records then chances are they can also change A records, and you've lost already.