[AFNobody]

If a hostile controls a DNS server, you are hosed anyway.

[AgentME]

If the sites you care about are using HSTS (and they're in the HSTS preload list, or you've visited them before from this device), then the worst the attacker can do is deny you from accessing them.

[AFNobody]

HSTS depends on DNS and NTP.