Had to move away from pfSense due to this. It just wasn't possible to stop it giving my devices its public IP as DNS.

So every time I got a new prefix, machines would lose connectivity, usually until I rebooted them.

Switched to OpenWRT which respected my ULA.