[ilikenwf]

Depends on who the upstream provider is. Having a pihole or opnsense with dnscrypt and/or unbound setup is best.

[josephcsible]

How is dnscrypt any better than DoH? And doesn't unbound still need an upstream resolver to talk to?