Connect a root domain with A records
Your registrar would not let you point a root domain at a CNAME. The funnel was built, the domain was bought, and there was no way to connect the two.
The enemy is a registrar deciding which domains you can use.
Root domains can now connect with A records. On the domain's validation screen, choose "My registrar can't point a root domain at a CNAME" and you get A records plus one TXT record to prove you own the domain. Validation runs while you watch, and the SSL certificate is issued automatically. CNAME stays the recommended setup wherever your registrar supports it.
Try it: add a root domain, open Validate, switch to A records, and add the records at your registrar.
Documentation