[LinuxBender]

This is going to create a lot of noise (firewall drops) in networks where Linux is expected to be isolated. Many companies do this and many of those companies will start seeing alerts in their security operations centers. I am curious how most of them will respond.

[heavyset_go]

It's trivial to disable the systemd resolver or change the fallback DNS servers to something other than Cloudflare.

[LinuxBender]

Agreed, but people tend to not customize settings proactively. I usually see reactive changes. More often than not, people don't even know these changes to the base OS are occurring.