

Works with both vendors if looking into Pi-hole‘s logs and once they should really hardcode the DNS or similar stuff here, the connection will be disabled (which is the best way to deal with this anyway apart from updating firmware if you use an external box).
Once they try to reach IPs directly (ECOVACS once did so) you may block those on a firewall-basis but everything depends on your needs, will and setup of course.
Still like the idea behind it and wish there was support for GrapheneOS (going even further than /e/o) as well as better camera quality but this is the price we have to pay for flexibility and sustainability I think. Like the concept here but never tried to go with one so far.