Some unexpected failures in the unbound log have started occurring

I have started to see these errors occurring more frequently:

05/11/2019 14:38:16 C:\Program Files\Unbound\unbound.exe[1772:0] error: SERVFAIL <ctldl.windowsupdate.com. AAAA IN>: request has exceeded the maximum number restarts (eg. indirections) stop at hlb.apr-52dd2-0.edgecastdns.net.

05/11/2019 14:38:16 C:\Program Files\Unbound\unbound.exe[1772:0] error: SERVFAIL <ctldl.windowsupdate.com. AAAA IN>: request has exceeded the maximum number restarts (eg. indirections) stop at hlb.apr-52dd2-0.edgecastdns.net.

05/11/2019 14:38:16 C:\Program Files\Unbound\unbound.exe[1772:0] error: SERVFAIL <ctldl.windowsupdate.com. A IN>: request has exceeded the maximum number restarts (eg. indirections) stop at hlb.apr-52dd2-0.edgecastdns.net.

05/11/2019 14:38:16 C:\Program Files\Unbound\unbound.exe[1772:0] error: SERVFAIL <ctldl.windowsupdate.com. A IN>: request has exceeded the maximum number restarts (eg. indirections) stop at hlb.apr-52dd2-0.edgecastdns.net.

Also these:

05/11/2019 15:46:36 C:\Program Files\Unbound\unbound.exe[1772:0] error: SERVFAIL <globalsign.cloud. DS IN>: 0x20 failed, then got different replies in fallback

05/11/2019 15:54:35 C:\Program Files\Unbound\unbound.exe[1772:0] error: SERVFAIL <eff.org. DS IN>: 0x20 failed, then got different replies in fallback

but when I query all the above with DIG manually all seems to be OK.

And then this oddball which is probably and incorrect configuration somewhere (but not me?):

05/11/2019 16:10:13 C:\Program Files\Unbound\unbound.exe[15216:0] info: validation failure <cdn.ckeditor.com. A IN>: DS got unsigned CNAME answer from 1.0.0.1 and 2606:4700:4700::1001 for DS ckeditor.com. while building chain of trust

05/11/2019 16:11:17 C:\Program Files\Unbound\unbound.exe[15216:0] info: validation failure <cdn.ckeditor.com. A IN>: DS got unsigned CNAME answer from 2606:4700:4700::1111 and 1.0.0.1 for DS ckeditor.com. while building chain of trust

Anything I should be worried about?