Probably a security problem with nextdns

Attackers can use DoH for injecting malicious domains, example: https://dns.nextdns.io/xxxxx?name=malc0de.com

Blog I found from: https://www.bleepingcomputer.com/news/security/attackers-abuse-google-dns-over-https-to-download-malware/