Isn’t that the same as chronyd / chronyc in that it only happens when an operator is running those tools? (And not the NTP client / daemon itself).
Right.
I might run the tools a lot but they may not be a significant contributor to DNS traffic overall.