DNS over HTTPS (tunnelled through to Google servers, so definitely not ideal, but I guess you could install an endpoint on any server)
https://www.robertputt.co.uk/2017/01/06/securing-dns-traffic-with-dns-over-https/