I've been using the free and open source DNSCloak app [1] on iOS for encrypted DNS (DNS over HTTPS or DNS over TLS) to 1.1.1.1. As with this app, it also sets

I've been using the free and open source DNSCloak app [1] on iOS for encrypted DNS (DNS over HTTPS or DNS over TLS) to 1.1.1.1. As with this app, it also sets up a VPN profile (and the icon always shows up on the status bar). It's also setup with the "Connect On Demand" option so that anytime the device connects to a network, no connections will go through until this gets activated (this is also called "Always On VPN" or "VPN Kill Switch", to prevent traffic leakage). I couldn't find such an option in the Cloudflare app. [1]: https://itunes.apple.com/us/app/dnscloak-dnscrypt-doh-client/id1330471557 https://itunes.apple.com/us/app/dnscloak-dnscrypt-doh-client...