[2716057]

Depending on your network configuration I could imagine abuse of EDNS(0). This is used for example by NextDNS to identify which device (MAC) on your local network sent the request in order to apply specific filters and log the request. A not-so-friendly DNS could sell such information.

[johnisgood]

I use dnscrypt with a supposedly secure configuration, is that not enough to counteract this?

[IAmBroom]

Ask your friendly local CIA agent, not us. We don't have access to that intel.