Just adding another voice agreeing that I just want to block instance posts, not comments from their users.
If people really don’t want to see anything from an instance then they should join an instance that is bit federated with the one in question.
If blocking all users from an instance does get implemented I believe it should be separate to blocking posts as they’re very different use cases.
This is the correct answer if you trust that your ISP isn’t snooping on your traffic. Your DNS server will send unencrypted queries to the root name servers and the nameservers of the domains you search for. This traffic is easy to detect and parse, so you do need to trust your ISP, or the provider of wherever you host your DNS server.
If you don’t trust your ISP to that level you’ll need to trust whichever server you connect to. It’s a trade off to decide which is best for your use case.