I'm not really certain of how to react to this since [a] I can configure Wireguard on my phone to use any DNS server (usually my remote Pi-Hole+DoH but can be 1

I'm not really certain of how to react to this since [a] I can configure Wireguard on my phone to use any DNS server (usually my remote Pi-Hole+DoH but can be 1.1.1.1) and [b] wonder if non-tech folks will install this app and grasp the difference between encrypted DNS queries vs. encrypted traffic + DNS queries -- the latter being a better option requiring an actual VPN tunnel. I understand that using a loopback VPN is the only way to do this kind of DNS enforcement on non-rooted phones, which happen to be the majority. But I think Cloudflare would be better off promoting privacy by either offering a complete VPN service or partnering with the likes of Mullvad/Azire/ProtonVPN etc. to ensure DoH by default (which most end users of those services tweak anyway if they can).