I use a VPN and a private DNS . i feel like thats plenty and I dont have any DNS leaks from my tests. I wouldn't really trust mozzilla VPN a whole bunch but its probably fine. A real VPN provider is cheap, I'd get one. Ivpn or icevpn are good.