Single dot domain/DNS root zone query issue with containerized wireguard

The sheer number of those "." queries compared to the others makes me suspect something else going on.
Could you post output for below pls?

sudo grep 'query\[.* \. ' /var/log/pihole/pihole.log* | tail

FYI, those "." queries are popular for DDoS-ing: