>I would argue that the hurdle of bypassing DNS-based content blocking was already so vanishingly small [...] // That doesn't hold up under scrutiny. My pihole

>I would argue that the hurdle of bypassing DNS-based content blocking was already so vanishingly small [...] // That doesn't hold up under scrutiny. My pihole blocks ~11% of domain lookups (blocking 1000 queries per day for our household), turning it off vastly increases the unwanted content. It might seem is logical a ready hurdle, but it's a hurdle that practically works. I don't follow the reasoning that says this is a small barrier to malware so we'll remove it. What are we, end users, getting out of routing all our domain lookups to Cloudflare and ceding control of filtering?