@zackwhittaker Great article. I'd like to add a few points:

-Privacy-first service providers like Proton.

-As of MacOS Sequoia quite a bit in networking and DNS is either broken or changed. iCloud Private Relay now overrides any DNS system setting or proxy and defaults to Cloudflare, a company many security professionals find problematic.

-NextDNS has been a neat value-add for me so far.

(COI: none other than Proton and NextDNS customer)