> you could hand out your resolver via DHCP and transparently control local zones. With DoH, that's gone.

Checkout RFC9463