Pi-hole allows one local DNS to provide different resolutions to each client (e.g. you could have different rules for your iPhone VS computers) — but I do not differentiate against my blacklist responses.
On my networks, *.apple.com (&c) resolve immediately into the trashcan.
I wish there was a firewall similar to Little Snitch for phones. The only options I've seen where flimsy workarounds using the VPN service to act as a DNS filter, but then, you've got no real VPN.
e.g: if a client using Little Snitch enters new.incriminating.website into their web browser, the computer still initiates a DNS query to AND receives the IP of said URL — it is at THIS POINT that the Little Snitch dialogue pops up and asks "should we allow a connection to this server/IP?"
If this nuance is unclear to you, than just know that Little Snitch only prevents your computer from initiating connections to IP addresses, allowing the DNS resolution to happen without any user input.
----
Many people do not believe this until I show them their "blocked" URLs, as noted by a locally-running PiHole [which sees the "blocked" domain names, and resolves an IP... if you don't have PiHole rule blocking the hostname].
This reminds me how people on Windows always fight with their own computer (e.g., to disable the telemetry) instead of switching to an OS that respects you.
Same here. My phone won't prevent me from installing anything I want (including Little Snitch) and will not attempt to send any data somewhere.
I hope you mean Linux.
Hope.
I have no lifelong plans for utilizing either Google or MSFT products.