DNS over HTTPS / PiHole / Unbound

I have PiHole and Unbound configured. I've been reading more about DNS over HTTPS and DoT and wonder what method or combination of these services and protocols are best for privacy.

Using my current setup of PiHole + Unbound as an example, all requests to the PiHole DNS server are unencrypted which doesn't matter since it's a local network. There is no upstream DNS used such as Google or Cloudflare, and instead the Unbound instance acts as that upstream server. …

dns dns over https https pihole privacy unbound