There are definitely two sides here. I ended up starting to use NAT reflection a lot in recent years because these half assed fallback configs for DNS (Docker

There are definitely two sides here. I ended up starting to use NAT reflection a lot in recent years because these half assed fallback configs for DNS (Docker does the same) break split horizon DNS. So everything half works and it’s a pain to diagnose the first few times you run into it. For users that struggle to diagnose completely broken DNS, I think diagnosing half working DNS will be extremely difficult to do. Call me old fashioned, but I prefer completely working or completely broken over the “kind of sort of half assed mostly working in fallback mode” that seems to have become popular.