We tested Quad9, Cloudflare for Families, DNS0.eu, CleanBrowsing and Comodo Secure DNS on how well they perform to block malicious domains. We took a list of 130.525 known malicious hosts and tested if they resolved.
I see that the CERT-Poland's blocklist was used to test the resolvers. I wonder what kind of results you'd see if you used other, more popular datasets such as Phishtank, OpenPhish, and abuse.ch lists.