fs
says to
電訊台
if you properly use dnscrypt or doh, then the queries are encrypted to cf servers