> Sending all DNS requests to Cloudflare
I like to combine DoH with a VPN. The VPN doesn't see my DNS queries, and Cloudflare just sees a vague IP based in some vague colocation center. There is still plaintext SNI[0] to worry about though, which is being mitigated with something called ECH[1]. `Oblivious DoH`[2] is worth reading about too.
[0] https://www.cloudflare.com/learning/ssl/what-is-sni/