That's objectively not true. You can just use your own DNS server and lock the settings app either through android mdm policies or an locker app.