> I think part of the negativity you see is network admins working in businesses.

They can block the canary domain[1].

> Of course their argument was parental controls being made ineffective.

DoH is disabled on Windows and macOS if parental controls are enabled[1].

[1] https://support.mozilla.org/en-US/kb/configuring-networks-di...