Personally I use the cloudflare option but specifically route the DNS traffic, along with everything else that can be out a pair of tunnels rather than the WAN to merge it with everyone else using the same endpoints, but whatever solution works for you.