>Presumably there's a reason that you give these devices Internet access in the first place. Can't they just use the same host for their nefarious activity that

>Presumably there's a reason that you give these devices Internet access in the first place. Can't they just use the same host for their nefarious activity that they do for their legitimate activity? You make my point for me. Which is why hiding DNS traffic in https traffic is so insidious. Nuke DoH from orbit. It's the only way to be sure.