1.1.1.1 also supports DNS-over-TLS. DNS-over-HTTPS is clearly an ugly hack, but it's probably a necessary hack for the time being.

https://developers.cloudflare.com/1.1.1.1/dns-over-tls/