I don't know for sure since I don't know which apps you are talking about, but DNS blacklisting can be worked around by embedding your own libresolv and server configs into your app.
That means you don't use the DNS servers provided by the platform, so you can use the ones you "trust".
back
1 comments
I imagine end users could then configure their routers to use udp port mapping to point all dns queries at the local dns resolver.
Then, app developers could https tunnel out to a well-known ip running a dns resolver, I suppose.
At that point, end users could configure routers to block all outgoing ip’s that weren’t recently returned by the local dns resolver.
And so on. It is an arms race.