DoH is fine if a bit complicated. The problem is who the DoH provider is. Usually it's Cloudflare.