Re: Executives are allowed to ignore anything they want because they deserve it.
"but DNS over HTTP basically breaks this by design"
This is true, but it's not an insurmountable problem.
The easiest (but incomplete) solution is what Pi-Hole has already done: include a DoH server, so it's the one doing DNS lookups.
The complete solution, really only possible for people who are into this sort of thing right now (but could be made into a normal-person-friendly product) is what I've done: install a proxy that acts as a man-in-the-middle for all HTTPS traffic and drops undesirable DoH requests.