That's a steller idea, thanks for mentioning it! I didn't realize that different profiles assign unique DNS servers, allowing me to partition off devices that don't support DNS-over-TLS/DNS-over-HTTPS/IPv6. I don't think it'd affect total queries, but tighter rules for machines/robots, etc. should increase the percentage of blocked requests.