zlacker

A sufficiently spiteful app could host a DoH resolver/proxy on the same server as its api server (eg. api.example.com/dns-query), which would make it impossible for you to override DNS settings for the app without breaking the app itself.

>>gruez+(OP)
or it wouldn't even need to use any sort of dns. bit of a silly discussion.