It would also be a good idea to split your encrypted DNS lookups between as many providers as possible so as to both minimize its value to any one entity and also minimize the amount of data a single bad-faith provider would get.