It's not the PiHole itself that's the problem, but rather the clients on the LAN. I already redirect the PiHole's traffic over a VPN so the ISP is none the wise

It's not the PiHole itself that's the problem, but rather the clients on the LAN. I already redirect the PiHole's traffic over a VPN so the ISP is none the wiser, but I could go further and use DoH for that too.