Right now, it's quite easily to turn off Firefox's use of DNS-over-HTTPS, using about:config (or, like me, blocking the "canary domain" via my internal DNS serv

Right now, it's quite easily to turn off Firefox's use of DNS-over-HTTPS, using about:config (or, like me, blocking the "canary domain" via my internal DNS servers). On a larger scale, however, this won't work. We can't expect every application to honor such "workarounds" -- they will, of course, do what's best for them. That's my biggest problem with this "movement" -- removing the choice from the end user (at home) or those managing the network (at work). Yet again, I think it mostly comes down to "we know what's best for you".