CG Fiber – Missing Security Features

Hi everyone, like probably a few others, I'm shocked after realising that my brand-new CG Fiber lacks the security features my old UDM Pro has—particularly the one for enforcing DNS over TLS.

How do you guys work around it? I was thinking about restoring a pair of AdGuard DNS VMs to achieve that.