Is for real.

I provided a "better DNS configuration" suggestion, a month ago, but at this point I doubt it will remain useful [†]:

<https://news.ycombinator.com/item?id=50071310#50078574> [have router's DHCP auto-issue DNS to your pi-hole].

[†] I am but an observant (on my DNS logs) bluecollar poweruser – my tip will reduce only one vector, and we probably live in a world where IPv6 DNS addresses are [about to be, if not already] being hardcoded into TVs, computer security chips, and phones

----

At an absolute minimum: LittleSnitch will NOT help you here (and isn't doing everything it claims to, under the hood); it is entirely impossible for LS to stop pre-boot DNS queries; even under normal operation (e.g: when a dialogue pops up to `ACCEPT/DENY` a DNS resolution) your ISP still sees every. single. URL resolution (even if you `DENY` the connection).

Before you write "no it doesn't" please check your own DNS logs. It do be like it is.