Isn't this just trusting whoever runs https://query.hdns.io ?
https://github.com/publiusfederalist/federalist/blob/3670867...
https://github.com/publiusfederalist/federalist/blob/3670867...
It's temporarily using hdns.io as many people still do not have an hsd node installed. A later version will be shipped with a light weight SPV resolver, at which point, the last piece of the puzzle will be complete.