I've been liking cloudflare more and more over the years. They've been taking some genuinely big steps towards a more free, open, and private internet; them, alongside the Mozilla Foundation. Two big thumbs up :)

I've been running pihole for years, but recently put cloudflared behind it to translate all standard DNS traffic to DoH traffic after filtering but before leaving the LAN. Now I just gotta find a good way to implement DoH from client>pihole and devices can start using ECH while still receiving DNS adblock. This will make 100% of the traffic leaving my network encrypted :) (if the client wants it to be at least)