For work, Twingate hands-down - the DNS routing as you mentioned is a huge plus in fragmented networks like the ones I frequently work in. Admins seem to like its UI and ability to set policies that are effective without upsetting users like me.