While this is much better imo than just sending over DNS protocol as eliminates old DNS attacks like spoofing, it won't make users _practically_ any safer since

While this is much better imo than just sending over DNS protocol as eliminates old DNS attacks like spoofing, it won't make users _practically_ any safer since all subsequent TCP requests have the resolved IP in the IP packet. But like I said, it's still better than the default protocol.