I find it a little confusing. Looking at their site, it says "all devices, all networks". Do you need to set up some sort of firewall rule internally to captur

I find it a little confusing. Looking at their site, it says "all devices, all networks". Do you need to set up some sort of firewall rule internally to capture UDP 53? It talks about controlling usage of apps etc on kids phones, but a savvy kid will set up DNS over HTTP with a mobileconfig profile (or the Android equivilant), the same way we all found ways to bypass filters as kids. It seems to me like a remote pi-hole with a curated ACL list and the same anount of setup. Am I being too cynical?