@arrmo 

All these options simply send port 53 DNS requests somewhere else.

DNS Override just forwards the original port 53 request to another server which can be inside or outside your network

The other 'Proxy' options (DNSSEC, DoT and DoH) repackage the unencrypted Port 53 DNS request into the selected secure format and then forward it to your chosen proxy,  then receives the encrypted response, unpacks it and sends the unencrypted response back to the originating device on port 53.

So, NONE of these options will forward, redirect or proxy DNSSEC, DoT or DoH requests (because you can't without impersonating the SSL cert of each provider)