Certs for subdomains without the domain owner's permission

You’re right this issue is linked to DV certificates and is not LE-specific.