@simonzerafa I have run this DNS query sniffer https://www.nirsoft.net/utils/dns_query_sniffer.html
on Windows machines that were doing nothing. Its an easy way to see how the OS spies on users all the time, even with no one at the keyboard. Not that Apple doesn't. From these logs, I have used DNS to block lots of Microsoft websites.