So the latest advice is to enable DNS-over-HTTPS in your Browser.

Apparently this really pisses off Google, but more importantly it encrypts your DNS requests (i.e. the "site lookup" when you enter a site name)

It means your DNS requests can't be tampered with by anyone else, or diverted by a compromised router.

Instructions on how to do it in various browsers can be found here (apparently it's already enabled by default for US Firefox users):

How to Enable DNS Over HTTPS in Your Web Browser

If you're using Safari, hard luck, it isn't supported and that's because you wasted your money on overpriced Apple shite.