Any device you didn't have root on was free work around your DNS server already. This is weak security at best.

DHCP will catch up too. https://datatracker.ietf.org/doc/html/draft-peterson-doh-dhc...