> At every place I've worked, we've had trouble where ISPs just ignore TTLs and set them arbitrarily high.

DigitalOcean does this, or at least some of the collocation/hosting providers they are using for their infra. They appear to redirect :53 connections to their own resolvers that cache NXDOMAINs.