That issue was fixed in the latest release of uBlock Origin. That's why it required the additional permissions for DNS.