This really rubs me the wrong way about DoH. At the moment I mitigate this by outright blocking the Top 10 public DNS servers network wide.