If you don’t force encrypted DNS then you are trusting defaults and defaults exist to benefit operators, not you. https://untraceabledigitaldissident.com/force-encrypted-dns-every-device/