[khabaal]

This is not correct anymore since dns over tls. Well most routers do not support this yet, but its possible within your distro.

[gruez]

AFAIK you can't recurse using dns over tls. You have to use a provider such as google/cloudflare, at which point you're back to square one.