This protects against a tremendous amount of local and ISP level DNS request collection which is great; however, we ultimately need a zero-trust DNS system. KPMG auditing Cloudflare provides security through bureaucracy/obscurity which doesn't help.