@theduderog dnsviz is reporting that you are not sending SOA records for nodata.
And, that was one of the things noted by someone else responding to you in a different thread.
I don't know why unboundtest would not flag that but dnsviz does
https://dnsviz.net/d/uaenorth.azure.glb.confluent.cloud/dnssec/