[rabboRubble]

Thanks! Good info. Yeah, was able to confirm that the Cloudflare app defaulted to DNS over https. That's an improvement over my previous attempts to excise cellular DNS traffic away from my carrier.

Is Cloudflare also servicing internet requests or are requests still being serviced by the cellular providers after DNS is resolved?

[Operyl]

Cloudflare is using the NetworkExtension API purely to intercept DNS requests and nothing else. Everything happens on device and not in some remote VPN service.