> many will only allow captive DNS
That's an anti-feature, something one shouldn't even call internet access. Engineering entire protocol stacks around it sounds like enshrining it as if it were good practice.
It's reinforcing an inadequate equilibrium.