Encrypted DNS is great, so long as the end user retains control over which DNS servers provide the answers. This does appear to be the case here, and so it is

Encrypted DNS is great, so long as the end user retains control over which DNS servers provide the answers. This does appear to be the case here, and so it is still possible to disable it (use a local stubby instance to do encrypted DNS) or to use a custom setting (your nextdns.io config for example).