Doesn't Firefox default to eDNS these days? I don't think it can get much more trivial than that
In the UK, at least, it isn't the default (because of "the children"/"terrorism"). But it's still just a setting in Firefox/Chrome to change (and I guess in Edge too).
Changing the "secure dns" option on their phone/computer is probably easier than installing a VPN app, tbh.