Mullvad’s DNS. It’s available for non-subscribers as well, and their privacy policy explicitly claims they do not log DNS requests in any way. https://mullvad.net/en/help/no-logging-data-policy/

They support both DoT and DoH, and also have various servers for blocking ads, trackers etc (if you wish to use them): https://github.com/mullvad/dns-blocklists

Does it handle application updates as well?

Actually, it’s already useful for some folks. Sure, if you’re after a 100% feature parity to say XP, that’s not happening any time soon, but there are already folks using ReactOS in niche cases like embedded systems, especially in old systems like CNC machines, scientific instruments, industrial/factory machines and so on.

The main problem with old machines like that isn’t that they were running Windows NT4 or XP, but the fact that the hardware they’re using is breaking down and it’s getting increasingly difficult to replace it whilst maintaining compatibility. ReactOS is basically the only “supported” OS that still is compatible with those old specialised drivers and apps, while still being compatible with somewhat modern hardware.

The whole sudden shutting down of source code repos thereby putting the future of Rocky/Alma at risk, leading to a follow-on effect of sysadmins migrating away from Rocky/Alma and swearing off RH/RH-derived stuff in general.