It can check whether the digital signature of the file is valid.
It is only essential, if the one uses Windows DoH, if DNS service is disabled and DNS set manually, it will not make any requests.
Once disabled, DNS is faster and safer, no DNS poisoning. Many apps actually leak via DNS...