About the suggestion of using 9.9.9.9 as DNS. Reading https://www.globalcyberalliance.org/initiatives/quad9.html it seems to be a DNS that will refuse to resolve addresses that are in a threat list. It's both a good and bad thing. We ultimately trust our DNS provider but in this case blocking and maybe censorship are built in by design.