Enterprise and school devices often configure browsers to not allow modifying DoH settings and configure the OS to not accept unapproved programs like sideloaded browsers that may not obey that device policy.