Instead of nextdns returning 0.0.0.0 or :: as the ip address, is it possible to have nextdns answer with NX domain instead? There are more useful configuration options for requests like these on dns forwarders
In some cases a "NODATA" response (NOERROR with no answers) works preferable as well and prevents retries of the same (blocked) domain.