I installed a Pihole and set an edge router to direct any port 53 traffic that wasn’t from the Pihole, to the Pihole.

That made a Samsung behave a little better. But giving it no network access is better.