>but subdomain is probably easier to square
Why would it be? Is there some client/OS that doesn't support custom paths for DoH?
Android private DNS does not support alternate paths, alternative ports or basic http authentication.
Android private DNS does not support alternate paths, alternative ports or basic http authentication.