Strictly speaking you should run DoH to your pihole, to prevent local-network attacks, but that's a fairly minor issue and supposedly (epistemic status: outrigh

Strictly speaking you should run DoH to your pihole, to prevent local-network attacks, but that's a fairly minor issue and supposedly (epistemic status: outright hearsay) DoH is intentionally difficult to configure correctly (ie to a non-mozilla-approved server).