On Android 12+ (if my memory serves well), you can use DNS over TLS without having to install any additional software. It seems to cover all of the connections,

On Android 12+ (if my memory serves well), you can use DNS over TLS without having to install any additional software. It seems to cover all of the connections, but I don't think DoT is used when your phone connects to your network for VoWifi and eSIM provisioning connections (I didn't see them in my NextDNS logs)