I can't speak for the parent since I am not a BSD user at home, but I tried a few different options for DNS on my Windows laptop and dnscrypt-proxy was the simp

I can't speak for the parent since I am not a BSD user at home, but I tried a few different options for DNS on my Windows laptop and dnscrypt-proxy was the simplest to get up and running. Right now it's consuming 25 meg of RAM, which is perhaps a lot compared to built-in networking services, but not much compared to application software. It also saves installing ad block browser plugins, which feel far more heavyweight. My only complaint is that it doesn't stay running in the background waiting for connection if you boot up without wifi. There is a 1 hour timeout, but it doesn't seem to reliably keep the service hanging around till you connect to a wifi. Not a big deal - it starts up pretty much immediately from the Task Manager Services tab. I imagine if you have a dedicated router with limited RAM or are running a UNIX desktop there may be better options, but for a Windows laptop connecting direct to untrusted connections (e.g. 4G phone tether) it does the job just fine.