Why corps are pushing encrypted DNS so hard:

Because then I could not block those 54% of queries I currently block, most of which is Microsoft attempting to exfiltrate data from my network.