Add dnssec to avoid dns spoofing.
https://developer.apple.com/wwdc22/10079

Or force dns over https for url session queries -> https://www.wwdcnotes.com/notes/wwdc20/10047/