I'll rephrase, it's way better accomplished with UDP without sacrificing security in the ways I list.

Running DNS over HTTPS over TCP isn't needed. It doesn't solve a problem.

Doing JSON DNS for OOB DNS checks is useful since most applications speak HTTP. :-)