Block all other DNS by port and IP both from everything by pi-hole. Even if they hardcode 1.1.1.1 or Quad9 or Google or whatever, it would be exceedingly difficult to reach an IP address that is forbidden on the network at the router level. HTTPS will just fail (and likely fall back to network DNS settings as it should).
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments