Use NextDNS with this guide:

https://github.com/yokoffing/NextDNS-Config

Haven’t had anything broken :)

Data privacy is a good thing, but user awareness is far more important. People are always the weakest link when it comes to privacy & security.

I’m glad more and more people are getting educated with all the resources that we have today and I like how Apple makes it easy to turn it on when users are educated enough. But they do need to be mindful of what they’re storing, the consequences (if they forgot they password), and what does E2EE protect them from.

I use NextDNS and I do have a subscription, currently using it on my router via DNS over HTTPS.

It is an excellent service (like a Pi-Hole on cloud) and I like how it does things like logging and analytics.

For using it in iOS you shouldn’t need to use the app, just install a (signed) profile via apple.nextdns.io and it will be configured natively (this is Apple’s approved way to use 3rd party private DNS).

I use this profile method and just made an exception to my home & work wifi network but will always use it otherwise (on mobile network or any other wifi networks)

They do, the author just recently started working on it again and welcoming contributions :)

I agree. This requires the user to actually save the attacker phone number as contact in order for this the IP address to “leak”

There’s still a chance that your contacts would have been hacked, and one could be vulnerable. But it all comes back to your risk profile. If you require hiding your IP address, you should turn this off or even use a VPN for all your traffic.