Google DNS-over-HTTPS using LEDE / OpenWRT and https_dns_proxy. DNSBench Benchmark and impressions
Just to give you a quick introduction. Currently all your DNS queries are pure
UDP and go unsecured through the internet if you're not using a VPN. Your ISP or
anybody else who is able to act as a man-in-the-middle like public hotspots
could modify these DNS queries