However personally I also like https://nlnetlabs.nl/projects/unbound/about/
that is used by default in FreeMacOS™ and OpenMacOS™, being relatively
lightweight too. It has built-in DNSCrypt (if you desire it), full
cached DNSSEC support and DNS64.