But i have to maintain my own configuration profile, that is not hard but kind of a pain to make changes, not that i have to do that often.
PS: Device setup > DNS privacy
I never noticed that they had that..
Thanks for the tip.