The circumstances that led you to any particular decision are pre-determined at the time you’re making that decision, simply through the fact that those circumstances have already happened prior to the current decision at hand; but that doesn’t mean you don’t have the free will to make that decision in the moment.
To extend on that a little: if you were able to make the same person face the same decision multiple times under identical circumstances, I don’t believe you’d get identical results every time. It may not be an even distribution between the possible choices; but it wouldn’t be a consistent answer either. The Human element introduces too much chaos for that kind of uniformity.
I use cloudflared to translate DNS into DNS over TLS instead of Unbound to make it into recursive DNS. Just never really seen the need to switch it. I’m happy with nextDNS + Cloudflare resolving DNS upstream.
The main thing I wanted to note is port 53 outbound is blocked at the router to prevent devices from using external/unencrypted DNS. If a LAN device wants DNS resolution they MUST use the LAN DNS servers they were given via DHCP, or use their own DoT config, as plain DNS won’t make it out of the network.
It’s because of this block/enforcement that I run two local DNS servers: pihole on an RPI and a mirror on my main server tower, with Galaxy-Sync keeping them identical. If I tinker with/update one, the other picks up the slack so connectivity/resolution isn’t disrupted.