On the flip side; the client device is increasingly outside the control of the user (phones, smart speakers, TVs etc). So there's the question of how a user pro

On the flip side; the client device is increasingly outside the control of the user (phones, smart speakers, TVs etc). So there's the question of how a user protects themselves against a device that may be actively or incidentally malicious. > The network isn't (usually) under the user's control, and as a result any reasonable threat model for software running on client machines should assume the network is actively malicious. Yes, but there is nothing about DoH that solves this in any way.