Thoughts on the new 'custom DNS' feature? Is it just for show?

Just saw the announcement about NordLayer's "custom DNS" feature. Color me skeptical.

They're touting it as some big security win for businesses. But let's be real. If you're already tunneling all your traffic through their gateway, what's the actual threat model here? This feels like a checkbox feature to compete with ZTNA vendors who've had this for years. Is it just DNS-over-HTTPS to their resolvers, or can you actually point it to your internal DNS for hybrid cloud access? The marketing copy is suspiciously vague on the mechanics.

If it's the former, it's a shiny toy. If it's the latter, maybe it's useful. But I'll believe it when I see a config that doesn't break split-horizon lookups.