Clarification on wildcard matching of domains in NEDNSSettings - matchDomains

I have an `NEPacketTunnelProvider` that's configured using `NEPacketTunnelNetworkSettings`. I'm using `NEDNSSettings` to configure the DNS resolver of the packet tunnel, and would like to specify the exact domains that should use this resolver using the `matchDomains` member variable.

While it's not explicitly mentioned in the documentation [1], I've noticed that if a domain is present in `matchDomains`, then all subdomains of it will also be resolved using this resolver, as if a wildcard match rule is in place.

I wanted to ask if this the intended behavior, and if so, is there any way to disable it so that only exact domain matches will be resolved?

I.e., if "example.com" is in the `matchDomains` list, I would like requests for this domain be resolved using the configured DNS resolver, while ignoring requests to the subdomain"test.example.com".

[1] matchDomains | Apple Developer Documentation