RFC says no CNAME at root; modern managed-DNS (Cloudflare, Route 53) flatten the CNAME server-side and serve A records to clients. Best of both worlds.
CNAME flattening
A nameserver feature that returns A records at the root despite CNAME being configured.