Along this line, it might be fun to set up an encrypted text chat server that uses this method. What records would work best, rrsig, txt?
dig hi.001.mydomain.com
dig how.002.mydomain.com
dig are.003.mydomain.com
dig you.004.mydomain.comAlso, TXT can contain binary data, and when using DNS over TCP is pretty much unlimited in frame size.
If you're doing DNS over TLS to a public resolver that then transmits to an origin, that resolver is a third party that can see requests and responses.