There's a new DNS in town at 188.8.131.52. Which will roll out this Thursday.
We already know about 184.108.40.206 which is Google's DNS but it's not encrypted (if you know otherwise, share more.) So this will be a nice step in the right direction.
But what about a VPN? I thought I had an OK one and the CNET Cheapskate had a deal but it turns out they keep logs. More:
"It turns out that VPN companies such as PureVPN, HideMyAss, Hotspot Shield and VPN Unlimited and others (26 so far) are indeed tracking you.
Read more at https://www.dailydot.com/debug/top-vpns-tracking-behavior/
Seems we have to find another option here than a VPN"
So that deal on VPN Unlimited isn't such a deal after all. Back again to do more research for another one.