Comment by willcipriano

Pihole with the right block list can prevent known malicious software from hitting its command and control endpoints.

They can always use DOH but you can block DOH domains via the pinhole as well.