Does the enhanced CyberSecure site blocking feature work if devices use DOH?

Seems like Chrome and all Apple devices default to DHCP over HTTPS, which bypasses local DNS. (Firefox still honors the canary setting, I guess?)

I don’t have full control over all end devices, so is upgrading for filtering sort of pointless?