Re: Executives are allowed to ignore anything they want because they deserve it.
Not so true thankfully.
Install DNSCrypt which has DoH and DoT support, then import your block list into that.
DNSCrypt is also available for Rasbery Pi, Routers and Android, so those same block lists can be used where you need them.
Simply changing the OS to a resolver with DNSSec and DoH does not give you any way to authenticate the resolver.
No browsers test or display DNS validation errors so even if you think you are using the DoH resolver you set, you may not be.