Dnscrypt-proxy supports DNS over https (doh), oblivious DNS over https (odoh), DNS over TLS (dot), and dnscrypt (encrypted and anonymous DNS).
IP and domain blacklist. IP whitelist.
End to end encrypted.
You can use quad9, cloudflare, etc, or any provider you like.
I use https://dnscrypt.ca/about.shtml for my doh and as one of my dnscrypt servers.
Depending on your os it’s pretty simple to setup.
And somehow wikileaks is still up with terabytes of classified information.
Maybe IA needs to become a ‘journalist’