What do you mean by "secure DNS box"? This is a DNSSEC-validating resolver, which means it will check DNSSEC signatures, for whatever that is worth to you. It won't encrypt your DNS traffic. It may accept DoH/DNS-TLS requests, but won't (AFAIK) make outgoing DoH requests, so all the requests you make will be visible from the server.