Whenever I set up a new Android phone, I change one setting before I start using it normally. I update the Private DNS provider hostname, so the phone uses an encrypted server instead of the one assigned by the network. This keeps my lookups private on shared Wi-Fi and helps avoid the unreliable or slow resolvers you sometimes find on public networks. Setting this up early also limits what the network can see and makes it harder to track which domains I access.
