How do I enforce that? You don't. When the device manufacturers start being really evil and using certificate pinning for their DoH servers you simply don't bu

How do I enforce that? You don't. When the device manufacturers start being really evil and using certificate pinning for their DoH servers you simply don't buy those devices. When the only devices available in the market for a given function end up being "evil" you either implement the functionality yourself or you just live without. It's that or legislation (which will just become an arms race of manufacturers trying to work around the legislation). I do without. No "smart" devices for me or my family. It's working so far. I about the eventual future when no major appliances, vehicles, etc, will be available without "smart" features implemented in an owner-hostile manner.