Comment by tinus_hn

If you do not trust the network, as you should not, the risk of these attacks is reduced to that of denial of service attacks.

Yes, it’s annoying if an attacker can manipulate your DNS responses. But it’s unavoidable on the internet and your local network should not be your only defense against it.