I'm not sure about it. Since DNS traffic from *Pi box to upstream name servers are unencrypted.
ZeroSentinel is a small device you build and control. A doorway back into your own network. A resolver that answers to you and no one else. A canary that screams when something breaks instead of leaving you blind.
https://untraceabledigitaldissident.com/zerosentinel-off-site-privacy-node-guide/
Discussion
Why part 2 adds a resolver…
heads-up: we looked for a lightning address on your profile but could not find one... u can get a free one at https://rizful.com ... and then reply back to this comment so we can zap you.