I agree. Ability to select our preferred dns (rather than leaving it to carrier/isp) would enhance security. But I don't want to grant any non open source app root access (that's a bigger security risk)
You may be able to set up your home WiFi router for a specific dns, but that doesn't help you when using other WiFi or data.