Typically, in my experience, WiFi portals will hijack HTTP traffic, but not DNS requests.

DNS will either be blocked until you're signed in, or actually resolve correctly even prior to login.

Otherwise, the incorrect DNS record could still be cached even after signing in.

There's even a tool for routing all traffic over DNS queries, with a specialized resolver on the other end: https://code.kryo.se/iodine/