@raek
> I get that you need to trust someone with your DNS lookups

Not really, I mean you'd still need to trust that your ISP doesn't MitM DNS traffic (this is about the only thing DNSSEC helps against) but home routers can entirely run their own resolvers, and I'd say it ought to be an option given that ISPs also censors some domains.