They could force Chrome to use Google's DNS over HTTPS.