Generally yes, but there is a slight mitigating factor that certificate transparency makes it very public who you are attacking.

In theory, if it was just your site ip that was attacked and not your dns provider, CAA record can protect you. Probably one of the few cases where dns-sec is actually useful. All that though is an edge case that probably doesn't apply 99% of the time.