Thanks. While immediately the question was more around if we could systemically check if it was switched on, in the end following "return a negative answer from your network’s DNS resolver" presents a reasonably smooth experience on the device anyhow.