[dane-pgp]

While I understand the cynicism, I think that this point is critical:

"It means that while Cloudflare provides resolution-as-a-service, none of the components has to be trusted."

Of course it would be better if there were multiple interchangeable "resolution-as-a-service" providers, and even better if no one needed to use those services because their OS provided the functionality locally, but we're unfortunately a long way from that, and we shouldn't let the perfect be the enemy of the good while pursuing that goal.