That's not really sufficient. It could still phone home if it falls back to IP addresses. You should be blocking it at the firewall level, not just with DNS.
But me personally, I wouldn't ever connect any of these devices to my network.
Some of these devices also now use DoH to bypass any DNS-level filtering.
The only reason it is on my network is that I need it for home automation (via home bridge). I'll have to see what else I can do.