hi,
currently the only fallback you have if you use doh in firefox is the (usually unencrypted) dns resolver dictated by your OS
i feel that (as usual with conventional dns) you should be allowed to provide firefox with a secondary doh server as a safer fallback compared to conventional dns
thanks.