Google has patched an Android ADB bug in the May security patch set. If you have a Pixel phone you should already have the patches, and most other major manufacturers should be close behind.
You may feel like privacy settings keep you entirely safe, but that's just not the case with private DNS ...