I hope you can appreciate that DoH is meant to protect against a nefarious intermediary between the device/application and the server it's trying to reach. The

I hope you can appreciate that DoH is meant to protect against a nefarious intermediary between the device/application and the server it's trying to reach. The crux of the problem is that the device/application can't tell if the interference is friend or foe. All the techniques you can legitimately use on your local network, and that network operators have used in the past, can all be used one hop beyond the network you control. And, sadly, in 2024, most OS vendors are "in the game" of making sure they can 100% control the link and execution environment between themselves and their servers, without interference from the network operators along the way, OR the device owner.