[zelly]

the doomsday scenario the top-level comment mentioned is if they disabled that option. it's possible but very unlikely because it would make that browser unusable for many corporate networks.

[wvenable]

What corporate networks don't allow outbound HTTPS?

[zelly]

they run their own internal DNS resolvers

[wvenable]

Yes, but DNS over HTTPS by passes internal DNS resolvers and because it's HTTPS the corporate firewall would have no idea this is happening.