If the dns request is over 443 and the DoH server is the same host as the served resource, what can be done ?
The next step in the arms race would then be to implement DoHoH.
Sigh.