HotCakeX thanks for reaching out. I can understand the convenience trade-off your module provides, but we will not be adding similar functionality in Windows, and this piece of your README highlights the reason why:
-
in order to make sure the module will be able to always acquire the IP addresses of the dynamic DoH server, even when the currently set IPv4s and IPv6s are outdated, it will first attempt to use the DNS servers set on the system, if it fails to resolve the DoH domain, it will then use Cloudflare's 1.1.1.1 to resolve the IP addresses of the dynamic DoH server. DNS queries made to Cloudflare's 1.1.1.1 will be un-encrypted and in plain text.
When the admin configures DoH, we want to provide a strong guarantee that there's no opportunity for any network path attacker to intercept a bootstrap query. In other words, we prefer a stronger security/functionality trade-off when encrypted DNS is manually configured.