Concur with your recommendations. Would throw some caution on the OpenDNS recommendation, though. They're U.S. based and owned by Cisco. Depending on your threat model, this may or may not be desirable.

Just because you're not using their DNS servers doesn't mean they still don't see the DNS requests as its sent through their pipes and log them.

CyberFlare looks interesting, thank you for sharing. If anyone knows of similar tools or a guide on using CyberFlare I would greatly appreciate the information.

How would one use cyberflare? Any easier tools?

I'm afraid that the problem is bigger than that, most people have a number of devices that connect to the internet, not all of which work with VPN.

I second NordVPN, plus their interface is adorable.

Good VPNs have DNS leak protection now, and frankly, I recommend avoiding one that doesn't.

I use a VPN, but I have to turn it on for each device. Is there a good way to set up my router to automatically push all traffic through a VPN? I'd probably need to make exceptions for stuff like video traffic.