He fails to mention how many systems (Android, iOS, Firefox) feel entitled to ignore the LAN's choice of DNS server and use various DoH or similar solution, which means split DNS no longer works when your resolver is getting its results from CloudFlare et al, with NXDOMAIN or external IP addresses as a result.