Private DNS (DNS over HTTPS) on Android can block DNS hijacking. WiFi auth portals are often implemented in such way, so it breaks them. The consequences are rough - not all public WiFi networks are working for you, and also no additional slow (30 kbps) mobile internet from T-Mobile, after your data package runs out. And there is no user understandable error msg. #itsAlwaysDNS