> Running a privacy-focused public DNS service is a highly specialized undertaking

This seems like an overstatement: I have been running my own recursive DNS with Unbound for years and never thought it was a "highly specialized undertaking." It took perhaps a couple of hours to set up in the pre-AI age. I filter ads and trackers using an aggressive blacklist[0].

[0] https://github.com/hagezi/dns-blocklists