Thank you, very good to know this!
Does this in general applies not only GrapheneOS, but computers and firewalls as well? My VPN protected firewall also configured in the same way (running a VPN and NextDNS is filtering/handling the DNS requests). Just like my computer - that doesn't running VPN though, as that is running on the whole network, but also using NextDNS for filtering network connections (same as GrapheneOS).