kinda hate how they don’t provide dns with dnssec but no malware blocking (i prefer my dns to always just resolve stuff regardless if it’s “malware” or not)
also their default dns does has ECS disabled (they have an alternative one tho)