I do not use DHCP. (Nor do I use ARP.) For a small home network I do not need it. I run a private root and a private nameserver that serves encrypted DNS pac

I do not use DHCP. (Nor do I use ARP.) For a small home network I do not need it. I run a private root and a private nameserver that serves encrypted DNS packets from a datacenter. "Pseudo authoritative": the zone contains the third party addresses I need. All DNS queries are encrypted. Sent from localhost resolver to private nameserver. Nothing in the clear. That is how it works. There will always be metadata gathering on the internet (access logs). But there does not have to be unencrypted (DNS) packets or third party DNS resolvers.