Hacker News Reader

You could still shut down the initial DNS query for the dns-over-https provider and make it unreachable

Some people refuse devices that do not accept DHCP assigned DNS servers.[1]

You can also reroute port 53 traffic not from your internal dns server to your dns server...