Setting a custom DNS on a Router

[Blunt]

So I was reading an article and it made the point that my ISP (Comcast) was collecting my info and selling it (as an aggregate). It also talked about using a DNS to block malicious web sites.  There is a lot to choose from Cloudflare, Quad9, OpenDNS, etc.

Here are my questions;

1) I chose Quad9 a nonprofit

 

    9.9.9.9 - This is the standard option with full security filtering. This is the one that most people should use because it blocks malicious domains while keeping performance fast.
    9.9.9.10 - This version comes without security blocking. It’s useful if you want pure DNS resolution without any filtering.
    9.9.9.11 - A secured option that also supports ECS (or EDNS Client Subnet), which can improve content delivery accuracy in some cases.

 

It is recommended to use 9.9.9.9 full security filtering.  My concern is it might filter something I want on the fringe.  So using 9.9.9.10 would accomplish this, but not have the added security.  

My question is, will the secure filtering xxxx.10 have any drawbacks besides disallowing bad actor websites?  Maybe I want to side load something onto my Android phone that isn't on the Playstore.

2) Is Quad9 a good choice, Cloudflare is my second choice, but be honest I am just shooting fish in a barrel and hoping to get lucky.  So if anybody has any advice on DNS preferred,  would nice to know.

 

Reference list of what I am choosing from;
 

Provider	Primary IP	Type
Google Public DNS	8.8.8.8	Standard
Cloudflare	1.1.1.1	Performance
Cloudflare (Privacy)	1.1.1.2	Filtered
Quad9	9.9.9.9	Security
OpenDNS	208.67.222.222	Standard
OpenDNS FamilyShield	208.67.222.123	Filtered
NextDNS	45.90.28.0	Custom
AdGuard DNS	94.140.14.14	Ad-blocking
Comodo Secure DNS	8.26.56.26	Security
DNS.Watch	84.200.69.80	Privacy
Verisign Public DNS	64.6.64.6	Stability
Level3	4.2.2.2	Legacy
CleanBrowsing	185.228.168.9	Filtered
Alternate DNS	76.76.19.19	Ad-blocking
Control D (Unfiltered)	76.76.2.0	Custom
Control D (Malware)	76.76.2.1	Security
ISP DNS	Auto	Default

 

Reference article written for noobs like me

https://www.makeuseof.com/benchmarked-every-major-dns-server-against-my-isps-results-werent-close/