I’m a huge proponent for using Encrypted DNS but I can tell you the stock GL options really aren’t great if you’re looking for top notch security abilities/cipher support.
If you’ve got your WG tunnels/confs up as expected I’d open a new thread titled ‘[Slate AX, Flint, Flint v2] Advanced Encrypted DNS Configuration Options/Discussion’… but before doing so, see the below HOW-TO; you’ll need some foundational skills fr it to do so: