Also, DNS requests aren’t typically encrypted, so they’ll know the domains you’re visiting without having to go through IPs.