It's educational to try. I had to tunnel dns through openvpn to make dnssec reliable. On a wifi router, there's loads of leakage; mdns, ntp, things devices do

It's educational to try. I had to tunnel dns through openvpn to make dnssec reliable. On a wifi router, there's loads of leakage; mdns, ntp, things devices do to check for captive portal, weather apps, etc etc. You can mitm https, but breaks hsts sites, unless you hack your browser