This app is hardly better than what you describe though: you still need to install it on all your devices and configure it. Seems hardly any easier than just downloading a pre-made profile from the repo I linked above and installing it. shrug To each their own I guess.
https://github.com/paulmillr/encrypted-dns
Or does an app have some advantages to it that I'm unaware of?