More detailed response below, but I believe the best way is to use a router that can filter DNS requests (ie Unifi), and set the upstream of that to your ISP.

More detailed response below, but I believe the best way is to use a router that can filter DNS requests (ie Unifi), and set the upstream of that to your ISP. You can set the DNS server of your entire LAN using Network options without setting it on the individual devices. It’s up to the end-device whether it uses it or not, but 99%-ish do.