It seems like Salt is no longer supplying their own DNS servers when establishing an LTE connection. Instead, the network responds with Google DNS servers (8.8.8.8 8.8.4.4).
They seem to use a mix of Google Public DNS and own resolvers.
You are right; the list of servers is somewhat randomised and contains more than two entries.
Since my local resolver library only supports two DNS servers at once, I simply wasn't seeing Salt's own DNS server for a while.
Still, I don't think it's very nice to push Google DNS to clients.