Don't let Android leak DNS queries
This is exactly what we feared. It looks like this is the result of a bug within the Android core HTTP library. This leak is already fixed in the more recent releases of Android. In particular, any version after Android O (API 26+) should not leak DNS queries.
We should patch TBA so it relies on the Android core library as little as possible. We don't need the fancy optimizations Android provide with request pools and such, so I think we can simply create and manage a proxy connection ourselves.
#27822 (moved) maybe related (but there isn't enough info available).