DNS only VPN service on Android Q
The DNS configuration does actually work.
My observation that it wasn't is actually being caused by Chrome. Chrome (not sure which versions) uses its own dns resolver, circumventing the DNS settings applied by the VPN.
Discussion here: https://www.xda-developers.com/fix-dns-ad-blocker-chrome/