Andromxda 🇺🇦🇵🇸🇹🇼

I just install Windows 11 Pro N, it comes with much less bloat than the normal Pro version. Then I run the Ameliorated playbook to get rid of most of the spyware and all the other junk. You can also run a script from privacy.sexy for good measure, but AME should handle most of it.
Just make sure to install the Windows Media Feature Pack from the “Optional features” dialog in the settings before running AME, because it might not be possible afterwards.

If you need a traditional, unencrypted DNS service, check out Quad9 and AdGuard’s Public DNS. If you can use DoT or DoH, use LibreDNS or Mullvad DNS. If you want more customization, check out NextDNS.