Simple CNAME redirects are not allowed for APEX domains.
See https://serverfault.com/questions/613829/why-cant-a-cname-record-be-used-at-the-apex-aka-root-of-a-domain