Running from Docker: why not use "--net=host"

[leeee-me]

I am using NextDNS as host DNS service. This means:
Newere NextDNS will use systemd-resolved with DoT/DoH in systemd-resolved.
Older NextDNS will use its own DNS deamon and replace 127.0.0.1:53 to point itself.

In this case, docker may be confused or ignore these conflict DNS settings. Hence, it will report wrong leak information since the container will point DNS to other places rather than NextDNS,

In that case, with "--net=host", this can prevent the confusion and incompatibility.