Or NextDNS.io, which opens the can of worms of trusting a 3rd party, but I trust the team behind it (for the time being at least) and it's insanely convenient,

Or NextDNS.io, which opens the can of worms of trusting a 3rd party, but I trust the team behind it (for the time being at least) and it's insanely convenient, not being tied to your local network (as with most setups).