Enabling Mail chooses an unused DKIM name while DNS edits are held, so a simultaneous edit cannot be replaced by the new signing record. Generated Mail records remain protected even when an imported value matches them.
Removing a retained zone also clears a backend zone whose publication was interrupted. Null MX records keep their dot target when imported and displayed.