Why I Don't Like Localhost Doing DNS

[NollipfSense]

I never like the idea of localhost (127.0.0.1) for DNS and always specify using 192.168.1.1 or an LAN IP...why, it just seems that locahhost is vulnerable...case in point, I have an email server on an external host provider and have implemented DMARC, the domain-based message authentication reporting, security email protocol to prevent spoofing. However, it seems that it using localhost as DNS that seems to bypass the very DMARC and instead of emulating IDS/IPS to drop the message, localhost sends the message to the email account holder basically from the email account holder.

Someone needs to create an email IDS/IPS...makes sense? @bmeeks could you!