While I think you're right, in the sense that an attacker who can forge your DNS request for ssh.example.com to direct your SSH from 192.168.1.111 to 192.168.1.200 might have the ability to manipulate the TXT entry of your public key signature in the DNS records, it's a matter of
who you think your attacker could be.
Security is all relative, but I'm quite sure it would be possible for your to just sign your public key signature (which is what the article covers), and presumably you've kept your private key a real secret, so that isn't forge-able (unless your enemy has cracked your 2046/4096-bit RSA key).