Dnsmasq have recently released a new version 2.90.
It seems to include a very useful option to block specific query types other than A and AAAA, like TYPE 65 (HTTPS) DNS queries that are known to circumvent the hosts file and the address= option in Dnsmasq.
Add --filter-rr option, to filter arbitrary RR-types.
--filter-rr=ANY has a special meaning: it filters the answers to queries for the ANY RR-type.
Can this new version be included in the latest snapshots or the next release?
Unless other reviewers or committers approve it, it will rot there forever. But dnsmasq is a core component, so it will eventually get upgraded in any case.