I cannot trust non-free software to use OS DNS settings (Chrome taught me that). I wouldn't want to proxy all HTTPS traffic (may not be possible if software ig

I cannot trust non-free software to use OS DNS settings (Chrome taught me that). I wouldn't want to proxy all HTTPS traffic (may not be possible if software ignores system-wide TLS CAs and uses bundled trust chain). DoH introduces bunch new problems without solving any that I had.