https://www.cloudflare.com/en-gb/learning/ssl/what-is-encryp...

Or, also, not using SNI at all.

But still, you can probably correlate DNS requests with connections to IP addresses in many cases. Although if the program uses DNS over HTTPS (DoH) like several programs do now then the DNS record is also not known.