@hyde
NextDNS for DoH with dnscrypt-proxy, or you can have anonymized dnscrypt with some reliable providers