No root required either.
AdGuard is good, but NextDNS is on another level.