It's all thanks to OPNsense and its solid plugin support ...
You are flying completely blind on your home network if you are still just using standard DNS ...