Then your problem is that you have a locked down device that isn't truly yours. App makers always had the ability to use a proprietary encrypted protocol to serve ads. DNS-over-HTTPS doesn't give them that ability. But it does provide a standard that people who do really own their own devices can use to preserve user choice. No one should protest that.