[ummonk]

By the way, if you haven't already you should enable DNS over HTTPS or DNS over TLS.

Hopefully device providers make it standard sooner rather than later and eliminate insecure DNS.